npp[.]8[.]6[.]8[.]portable[.]x64[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

npp.8.6.8.portable.x64.zip
Size

5.8MB
MD5

21638d22550169e4d6f805b892f15da0
SHA1

d3cc7bd7687169220f3a4a83040608bdfa2e0b56
SHA256

5ffda6b66e438e585bbc13f8b7e15801419efd76aedcafd6f221822198b85b32
SHA512

76931dbe9000cf822bdc06b5016d5d4b87d0dfcb95793e6e5ac8d656134e1bf8dfd60fe47617a465bb712035524379b039995079e685b349ae648b7627cfdc54
SSDEEP

98304:71DvvJZV958IirQGfITRmA3KDCc3uz5Lafu6ni+0S98lpokpev37o2el5ulV851Y:7JXJZVArZf8m4c6ofIvS98/okpehelUr

Score

1^/10

Malware Config

Signatures

Files

npp.8.6.8.portable.x64.zip
.zip
autoCompletion/BaanC.xml
.xml
autoCompletion/actionscript.xml
.xml
autoCompletion/autoit.xml
.xml
autoCompletion/batch.xml
.xml
autoCompletion/c.xml
.xml
autoCompletion/cmake.xml
.xml
autoCompletion/cobol.xml
.xml
autoCompletion/coffee.xml
.xml
autoCompletion/cpp.xml
.xml
autoCompletion/cs.xml
.xml
autoCompletion/css.xml
.xml
autoCompletion/gdscript.xml
.js .xml polyglot
autoCompletion/go.xml
autoCompletion/html.xml
.xml
autoCompletion/java.xml
.xml
autoCompletion/javascript.xml
.xml
autoCompletion/lisp.xml
.xml
autoCompletion/lua.xml
.xml
autoCompletion/nsis.xml
.xml
autoCompletion/perl.xml
.xml
autoCompletion/php.xml
.xml
autoCompletion/powershell.xml
.ps1 .xml polyglot
autoCompletion/python.xml
.xml
autoCompletion/raku.xml
.xml
autoCompletion/rc.xml
.xml
autoCompletion/sql.xml
.xml
autoCompletion/tex.xml
.xml
autoCompletion/typescript.xml
.xml
autoCompletion/vb.xml
.xml
autoCompletion/vhdl.xml
.xml
autoCompletion/xml.xml
.xml
change.log
config.xml
.xml
contextMenu.xml
.xml
functionList/ada.xml
.xml
functionList/asm.xml
.xml
functionList/autoit.xml
.xml
functionList/baanc.xml
.xml
functionList/bash.xml
.xml
functionList/batch.xml
.xml
functionList/c.xml
.xml
functionList/cobol-free.xml
.xml
functionList/cobol.xml
.xml
functionList/cpp.xml
.xml
functionList/cs.xml
.xml
functionList/fortran.xml
.xml
functionList/fortran77.xml
.xml
functionList/gdscript.xml
.xml
functionList/haskell.xml
.xml
functionList/hollywood.xml
.xml
functionList/ini.xml
.xml
functionList/inno.xml
.xml
functionList/java.xml
.xml
functionList/javascript.js.xml
.xml
functionList/krl.xml
.xml
functionList/lua.xml
.xml
functionList/nppexec.xml
.xml
functionList/nsis.xml
.xml
functionList/overrideMap.xml
.xml
functionList/pascal.xml
.xml
functionList/perl.xml
.xml
functionList/php.xml
.xml
functionList/powershell.xml
.xml
functionList/python.xml
.xml
functionList/raku.xml
.xml
functionList/ruby.xml
.xml
functionList/rust.xml
.xml
functionList/sinumerik.xml
.xml
functionList/sql.xml
.xml
functionList/typescript.xml
.xml
functionList/universe_basic.xml
.xml
functionList/vhdl.xml
.xml
functionList/xml.xml
.xml
langs.model.xml
.js .xml polyglot
license.txt
localization/abkhazian.xml
.xml
localization/afrikaans.xml
.xml
localization/albanian.xml
.xml
localization/arabic.xml
.xml
localization/aragonese.xml
.xml
localization/aranese.xml
.xml
localization/azerbaijani.xml
.xml
localization/basque.xml
.xml
localization/belarusian.xml
.xml
localization/bengali.xml
.xml
localization/bosnian.xml
.xml
localization/brazilian_portuguese.xml
.xml
localization/breton.xml
.xml
localization/bulgarian.xml
.xml
localization/catalan.xml
.xml
localization/chineseSimplified.xml
.xml
localization/corsican.xml
.xml
localization/croatian.xml
.xml
localization/czech.xml
.xml
localization/danish.xml
.xml
localization/dutch.xml
.xml
localization/english.xml
.xml
localization/english_customizable.xml
.xml
localization/esperanto.xml
.xml
localization/estonian.xml
.xml
localization/extremaduran.xml
.xml
localization/farsi.xml
.xml
localization/finnish.xml
.xml
localization/french.xml
.xml
localization/friulian.xml
.xml
localization/galician.xml
.xml
localization/georgian.xml
.xml
localization/german.xml
.xml
localization/greek.xml
.xml
localization/gujarati.xml
.xml
localization/hebrew.xml
.xml
localization/hindi.xml
.xml
localization/hongKongCantonese.xml
.xml
localization/hungarian.xml
.xml
localization/indonesian.xml
.xml
localization/irish.xml
.xml
localization/italian.xml
.xml
localization/japanese.xml
.xml
localization/kabyle.xml
.xml
localization/kannada.xml
.xml
localization/kazakh.xml
.xml
localization/korean.xml
.xml
localization/kurdish.xml
.xml
localization/kyrgyz.xml
.xml
localization/latvian.xml
.xml
localization/ligurian.xml
.xml
localization/lithuanian.xml
.xml
localization/luxembourgish.xml
.xml
localization/macedonian.xml
.xml
localization/malay.xml
localization/marathi.xml
.xml
localization/mongolian.xml
.xml
localization/nepali.xml
.xml
localization/norwegian.xml
.xml
localization/nynorsk.xml
.xml
localization/occitan.xml
.xml
localization/piglatin.xml
.xml
localization/polish.xml
.xml
localization/portuguese.xml
.xml
localization/punjabi.xml
.xml
localization/romanian.xml
.xml
localization/russian.xml
.xml
localization/samogitian.xml
.xml
localization/sardinian.xml
.xml
localization/serbian.xml
.xml
localization/serbianCyrillic.xml
.xml
localization/sinhala.xml
.xml
localization/slovak.xml
.xml
localization/slovenian.xml
.xml
localization/spanish.xml
.xml
localization/spanish_ar.xml
.xml
localization/swedish.xml
.xml
localization/tagalog.xml
.xml
localization/taiwaneseMandarin.xml
.xml
localization/tajikCyrillic.xml
.xml
localization/tamil.xml
.xml
localization/tatar.xml
.xml
localization/telugu.xml
.xml
localization/thai.xml
.xml
localization/turkish.xml
.xml
localization/ukrainian.xml
.xml
localization/urdu.xml
.xml
localization/uyghur.xml
.xml
localization/uzbek.xml
.xml
localization/uzbekCyrillic.xml
.xml
localization/venetian.xml
.xml
localization/vietnamese.xml
.xml
localization/welsh.xml
.xml
localization/zulu.xml
.xml
notepad++.exe
.exe windows:6 windows x64 arch:x64

2169fb6fba67793dc0466227f0861e58

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

13/05/2022, 00:00

Not After

14/05/2025, 23:59

Subject

CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c1:87:42:8c:be:43:5f:f5:82:40:d5:aa:91:a1:51:c8:01:ec:57:27:40:c8:c1:90:71:8f:ef:7e:57:69:b5:61
Signer

Actual PE Digest

c1:87:42:8c:be:43:5f:f5:82:40:d5:aa:91:a1:51:c8:01:ec:57:27:40:c8:c1:90:71:8f:ef:7e:57:69:b5:61

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

comctl32

ImageList_DragShowNolock
ImageList_DragEnter
ImageList_DragMove
ImageList_BeginDrag
ImageList_Remove
ord17
ImageList_SetIconSize
ImageList_AddMasked
InitCommonControlsEx
ImageList_Destroy
ImageList_Create
ImageList_ReplaceIcon
_TrackMouseEvent
ImageList_Draw
ImageList_GetImageInfo
ord381
ord412
ord411
ord410
ImageList_EndDrag
ord413

shlwapi

AssocQueryStringW
ColorRGBToHLS
PathStripPathW
PathAddExtensionW
PathAppendW
ColorAdjustLuma
PathRemoveExtensionW
PathIsDirectoryW
PathCombineW
PathIsRelativeW
PathFindFileNameW
PathCompactPathExW
PathGetDriveNumberW
PathMatchSpecW
PathFindExtensionW
PathFileExistsW
PathRemoveFileSpecW
ColorHLSToRGB

shell32

SHCreateItemFromParsingName
SHFileOperationW
DragQueryFileW
DragQueryPoint
DragFinish
ShellExecuteW
ord165
SHGetFolderPathW
Shell_NotifyIconW

dbghelp

ImageNtHeader

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

crypt32

CertNameToStrW
CertGetCertificateContextProperty
CertGetNameStringW
CertFindCertificateInStore
CryptMsgGetParam
CertCloseStore
CryptQueryObject
CryptMsgClose

wintrust

WinVerifyTrust

sensapi

IsDestinationReachableW
IsNetworkAlive

wininet

InternetCrackUrlW

uxtheme

EndBufferedAnimation
SetWindowTheme
GetThemeTransitionDuration
DrawThemeParentBackground
CloseThemeData
GetThemePartSize
DrawThemeBackground
OpenThemeData
GetThemeFont
GetThemeBackgroundContentRect
EnableThemeDialogTexture
DrawThemeTextEx
BufferedPaintStopAllAnimations
BeginBufferedAnimation
BufferedPaintRenderAnimation

dwmapi

DwmSetWindowAttribute

kernel32

GlobalLock
GlobalUnlock
WriteFile
GetTimeFormatEx
CreateFileW
GetDateFormatEx
FormatMessageW
GlobalAlloc
CloseHandle
GetLocalTime
GetCurrentDirectoryW
SetFilePointerEx
FlushFileBuffers
GetFinalPathNameByHandleW
SetFileTime
FindFirstStreamW
FormatMessageA
lstrcpynW
ExpandEnvironmentStringsW
SetCurrentDirectoryW
SizeofResource
LockResource
LoadResource
FindResourceW
FreeLibrary
WaitForSingleObject
CreateEventW
SetEvent
CreateThread
ResetEvent
CopyFileW
GetCurrentProcess
GetCurrentProcessId
CreateMutexW
ReleaseMutex
Sleep
GlobalSize
GetApplicationRestartSettings
UnregisterApplicationRestart
lstrcmpiA
GetLongPathNameW
WaitForMultipleObjects
CopyFileExW
GetVersionExW
GetSystemInfo
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
lstrcpynA
SetLastError
GetTempPathW
CancelIo
WaitForSingleObjectEx
QueueUserAPC
SystemTimeToTzSpecificLocalTime
ReadDirectoryChangesW
GetLocaleInfoA
LCMapStringW
GetTickCount
GetStringTypeExW
LCMapStringA
GetStringTypeExA
GetUserDefaultLCID
LoadLibraryA
GetSystemTimeAsFileTime
LCMapStringEx
GetLocaleInfoEx
DecodePointer
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetNativeSystemInfo
SleepConditionVariableSRW
WakeAllConditionVariable
GetModuleHandleExW
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
IsProcessorFeaturePresent
RaiseException
RtlPcToFileHeader
InitOnceBeginInitialize
InitOnceComplete
QueryPerformanceFrequency
QueryPerformanceCounter
GetStringTypeW
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetDateFormatW
lstrcpyW
ReplaceFileW
MoveFileExW
GetTimeFormatW
DeleteFileW
GetDiskFreeSpaceExW
FileTimeToSystemTime
GetFileAttributesExW
SleepEx
GetFullPathNameW
CompareFileTime
CreateDirectoryW
GetFileAttributesW
FindClose
lstrlenW
FindNextFileW
FindFirstFileW
WideCharToMultiByte
MultiByteToWideChar
GlobalFree
GetVersion
GetACP
GetModuleFileNameW
MulDiv
lstrcmpW
GetCurrentThreadId
LocalFree
GetLastError
LocalAlloc
LoadLibraryExW
lstrcmpiW
GetModuleHandleW
GetProcAddress
SetFileAttributesW
VirtualProtect
CompareStringEx
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ReadFile
ExitProcess
ExitThread
FreeLibraryAndExitThread
GetStdHandle
HeapAlloc
HeapFree
GetFileType
GetConsoleMode
ReadConsoleW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
GetLocaleInfoW
RtlUnwind
IsValidLocale
EnumSystemLocalesW
GetTimeZoneInformation
GetFileSizeEx
GetConsoleOutputCP
IsValidCodePage
GetOEMCP
HeapReAlloc
FindFirstFileExW
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
HeapSize
SetEndOfFile
WriteConsoleW
RegisterApplicationRestart

user32

AppendMenuW
RegisterWindowMessageW
ScrollWindow
RemovePropW
GetPropW
InsertMenuItemW
KillTimer
GetCaretBlinkTime
AppendMenuA
GetMessageTime
GetKeyboardLayout
ValidateRect
SetTimer
DestroyCursor
MsgWaitForMultipleObjects
NotifyWinEvent
GetUpdateRgn
SystemParametersInfoA
GetDoubleClickTime
DrawTextA
CopyImage
MonitorFromPoint
AdjustWindowRectEx
LoadStringW
LoadStringA
DeleteMenu
GetDCEx
GetDlgItemTextA
SetScrollInfo
GetScrollInfo
GetWindowTextLengthW
GetMessageW
DeferWindowPos
UnregisterClassW
RegisterClassExW
TrackPopupMenu
BeginDeferWindowPos
DispatchMessageW
MessageBoxA
TranslateMessage
LoadIconW
EndDeferWindowPos
FlashWindowEx
PostQuitMessage
BringWindowToTop
SetCapture
GetSysColorBrush
ReleaseCapture
GetKeyState
RedrawWindow
IsChild
SetParent
FindWindowExW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetMenuState
GetMenuItemCount
CreatePopupMenu
SetMenuItemInfoW
DestroyMenu
InsertMenuW
CheckMenuItem
EnableMenuItem
CreateMenu
IsWindow
EmptyClipboard
SetClipboardData
GetDlgItemInt
SetDlgItemInt
CreateDialogParamW
IsWindowVisible
ShowWindow
ClientToScreen
RegisterClipboardFormatW
SetClipboardViewer
MessageBoxW
OpenClipboard
ChangeClipboardChain
CloseClipboard
GetClipboardData
IsClipboardFormatAvailable
GetWindowLongW
SetMenuItemBitmaps
PostMessageW
GetMenu
DestroyWindow
HideCaret
CreateWindowExW
MessageBeep
GetScrollPos
GetWindowPlacement
LoadBitmapW
SetCaretPos
GetScrollRange
CreateCaret
RegisterClassW
SetWindowPlacement
DrawTextExW
LoadCursorW
DestroyCaret
SetCursor
SetScrollRange
ShowCaret
SetScrollPos
DrawEdge
UpdateWindow
DrawFrameControl
ToAscii
MoveWindow
EndDialog
DestroyIcon
DialogBoxIndirectParamW
SetFocus
ChildWindowFromPointEx
GetMonitorInfoW
DestroyAcceleratorTable
TranslateAcceleratorW
DrawMenuBar
SetRectEmpty
MonitorFromRect
CreateDialogIndirectParamW
ShowCursor
CreateAcceleratorTableW
FindWindowW
IsCharLowerW
IsZoomed
SetForegroundWindow
IsIconic
DrawIconEx
DialogBoxParamW
EnableWindow
GetDC
LoadImageW
GetMenuItemInfoW
DefWindowProcW
GetWindowRect
GetFocus
InflateRect
SetWindowPos
EnumChildWindows
FillRect
ScreenToClient
GetSystemMetrics
GetMenuBarInfo
OffsetRect
MapWindowPoints
TrackMouseEvent
FrameRect
DrawFocusRect
GetSysColor
IsWindowEnabled
IntersectRect
GetClassNameW
GetWindowDC
EnumThreadWindows
GetComboBoxInfo
GetClientRect
DrawTextW
GetParent
PtInRect
InvalidateRect
ChildWindowFromPoint
ReleaseDC
GetCursorPos
BeginPaint
EndPaint
GetWindowTextW
CallWindowProcW
SetWindowLongPtrW
SendMessageW
SetWindowTextW
GetWindowLongPtrW
GetDlgCtrlID
SetDlgItemTextW
GetDlgItemTextW
SendDlgItemMessageW
SetDlgItemTextA
GetDlgItem
wsprintfW
SetPropW
SystemParametersInfoW
GetAncestor
ModifyMenuW
CharUpperW
CharLowerW
IsCharAlphaNumericW
IsCharAlphaW
SetLayeredWindowAttributes
GetLastActivePopup
LoadMenuW
GetClassNameA
GetWindowTextA
IsDialogMessageW
SetMenu
CheckMenuRadioItem
GetMenuItemID
GetSubMenu
GetMenuStringW
RemoveMenu
GetIconInfo
CreateIconIndirect
WindowFromPoint
LockWindowUpdate
GetCapture
GetKeyboardState
MonitorFromWindow
mouse_event
ShowScrollBar
GetDesktopWindow
GetActiveWindow

gdi32

SetWindowOrgEx
CreateBitmap
BitBlt
SetROP2
SaveDC
RestoreDC
CreateCompatibleBitmap
CreateCompatibleDC
GetPixel
DeleteDC
LineTo
OffsetWindowOrgEx
CreatePatternBrush
PatBlt
SetBrushOrgEx
SetDIBits
GetDIBits
EnumFontFamiliesExW
EndPage
DPtoLP
StartDocW
ExtTextOutW
SetTextAlign
MoveToEx
StartPage
GetTextExtentPointW
StretchBlt
CombineRgn
IntersectClipRect
Ellipse
Polygon
ExtCreatePen
GetTextExtentExPointA
GdiAlphaBlend
GetTextExtentExPointW
GetTextExtentPoint32A
CreateDIBSection
ExtTextOutA
CreateHatchBrush
CreateFontW
GetTextMetricsW
GetROP2
GetDeviceCaps
GetObjectW
SelectObject
GetClipRgn
GetStockObject
CreateRectRgnIndirect
Polyline
CreateRectRgn
GetTextExtentPoint32W
SetTextColor
SetBkMode
CreatePen
SelectClipRgn
ExcludeClipRect
SetBkColor
CreateSolidBrush
CreateFontIndirectW
RoundRect
EndDoc
Rectangle
DeleteObject

comdlg32

PrintDlgW
ChooseColorW

advapi32

CryptReleaseContext
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptAcquireContextW
RegGetValueW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
CheckTokenMembership
FreeSid
AllocateAndInitializeSid
RegDeleteValueW
RegSetValueExW
RegEnumKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegQueryInfoKeyW
IsTextUnicode

ole32

RevokeDragDrop
RegisterDragDrop
OleInitialize
DoDragDrop
OleUninitialize
ReleaseStgMedium
CoUninitialize
CoInitialize
CoTaskMemFree
CoCreateInstance
CLSIDFromProgID

oleaut32

SysAllocStringLen
SysFreeString

imm32

ImmSetCandidateWindow
ImmSetCompositionStringW
ImmEscapeW
ImmGetCompositionStringW
ImmSetCompositionWindow
ImmSetCompositionFontW
ImmReleaseContext
ImmGetContext
ImmNotifyIME

Exports

Exports

CreateLexer
GetLexerCount
GetLexerFactory
GetLexerName
GetLibraryPropertyNames
GetNameSpace
LexerNameFromID
SetLibraryProperty

Sections

.text
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1006KB - Virtual size: 1005KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
plugins/Config/nppPluginList.dll
.dll windows:6 windows x64 arch:x64

c5d2c3c7e7bb46877c74a361a465d678

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

13/05/2022, 00:00

Not After

14/05/2025, 23:59

Subject

CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

82:f4:3c:eb:f8:1e:fe:db:8e:19:33:aa:3c:1c:0d:e5:4b:37:44:3f:cf:b6:3d:ec:03:b7:00:48:48:c3:ed:11
Signer

Actual PE Digest

82:f4:3c:eb:f8:1e:fe:db:8e:19:33:aa:3c:1c:0d:e5:4b:37:44:3f:cf:b6:3d:ec:03:b7:00:48:48:c3:ed:11

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\sources\nppPluginList\bin64\nppPluginList.pdb

Imports

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
WriteConsoleW

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
plugins/NppConverter/NppConverter.dll
.dll windows:6 windows x64 arch:x64

85c9dfabb66649f3d6c7678b63060706

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

13/05/2022, 00:00

Not After

14/05/2025, 23:59

Subject

CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

84:a7:dc:33:70:93:69:5e:43:04:fd:0e:55:99:d0:03:21:81:75:bd:c1:38:5b:1a:c0:a5:32:80:dd:a7:d7:9a
Signer

Actual PE Digest

84:a7:dc:33:70:93:69:5e:43:04:fd:0e:55:99:d0:03:21:81:75:bd:c1:38:5b:1a:c0:a5:32:80:dd:a7:d7:9a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

shlwapi

PathFindFileNameW
PathFileExistsW

kernel32

InterlockedFlushSList
SetEndOfFile
lstrlenW
GlobalAlloc
GlobalLock
GlobalUnlock
SizeofResource
GetLastError
LockResource
GlobalFree
LoadResource
FindResourceW
GetPrivateProfileIntW
GetModuleFileNameW
GetPrivateProfileSectionNamesW
lstrcpyW
WriteConsoleW
HeapReAlloc
HeapSize
CreateFileW
ReadConsoleW
ReadFile
SetStdHandle
GetStringTypeW
GetProcessHeap
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
CloseHandle
GetFileSizeEx
SetFilePointerEx
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo

user32

ShowWindow
MoveWindow
SetFocus
GetDlgItem
UpdateWindow
InvalidateRect
GetWindowTextW
CreateDialogParamW
GetWindowRect
SetWindowLongPtrW
IsWindowVisible
MessageBoxA
GetClientRect
CreateDialogIndirectParamW
RegisterClipboardFormatW
SendMessageW
OpenClipboard
CloseClipboard
EmptyClipboard
SendDlgItemMessageW
SendDlgItemMessageA
SetClipboardData
DestroyWindow
MessageBoxW
GetWindowLongPtrW

Exports

Exports

beNotified
getFuncsArray
getName
isUnicode
messageProc
setInfo

Sections

.text
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
plugins/NppExport/NppExport.dll
.dll windows:6 windows x64 arch:x64

17ff9a294f3152c5c744802081c5e1c4

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

13/05/2022, 00:00

Not After

14/05/2025, 23:59

Subject

CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f3:a6:d3:86:9a:f7:27:61:b9:8a:41:7f:34:73:6e:4f:14:92:04:a8:15:b0:eb:3c:5b:b5:a3:41:1e:53:f7:a9
Signer

Actual PE Digest

f3:a6:d3:86:9a:f7:27:61:b9:8a:41:7f:34:73:6e:4f:14:92:04:a8:15:b0:eb:3c:5b:b5:a3:41:1e:53:f7:a9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameW
MulDiv
lstrcpynW
lstrcpyW
lstrcatW
MultiByteToWideChar
WriteConsoleW
CloseHandle
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
SetStdHandle
GetStringTypeW
WriteFile
CreateFileW
lstrcmpiA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
SetFilePointerEx
GetProcessHeap
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW

user32

GetDC
EmptyClipboard
ReleaseDC
CloseClipboard
OpenClipboard
SendMessageW
MessageBoxW
RegisterClipboardFormatW
SetClipboardData

gdi32

GetTextExtentPoint32W
GetDeviceCaps
DeleteObject
CreateFontW
SelectObject

comdlg32

GetSaveFileNameW

shlwapi

PathFindFileNameW
PathRemoveExtensionW
PathRemoveFileSpecW

Exports

Exports

beNotified
getFuncsArray
getName
isUnicode
messageProc
setInfo

Sections

.text
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
plugins/mimeTools/mimeTools.dll
.dll windows:6 windows x64 arch:x64

f36567aa27bb971fb945309de8037ee5

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

13/05/2022, 00:00

Not After

14/05/2025, 23:59

Subject

CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f8:13:a1:6c:b7:ef:ed:73:0a:1f:a4:9f:53:d0:f6:4c:fc:50:70:30:d8:00:3c:ed:d1:78:ee:04:80:1c:37:9e
Signer

Actual PE Digest

f8:13:a1:6c:b7:ef:ed:73:0a:1f:a4:9f:53:d0:f6:4c:fc:50:70:30:d8:00:3c:ed:d1:78:ee:04:80:1c:37:9e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyW
WriteConsoleW
CloseHandle
CreateFileW
SetFilePointerEx
GetConsoleMode
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP

user32

GetClientRect
ClientToScreen
CreateDialogParamW
SetWindowPos
SendMessageW
EndDialog
MessageBoxW

Exports

Exports

beNotified
getFuncsArray
getName
isUnicode
messageProc
setInfo

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
readme.txt
shortcuts.xml
.xml
stylers.model.xml
.xml
tabContextMenu_example.xml
.xml
themes/Bespin.xml
.xml
themes/Black board.xml
.xml
themes/Choco.xml
.xml
themes/DansLeRuSH-Dark.xml
.xml
themes/DarkModeDefault.xml
.xml
themes/Deep Black.xml
.xml
themes/Hello Kitty.xml
.xml
themes/HotFudgeSundae.xml
.xml
themes/Mono Industrial.xml
.xml
themes/Monokai.xml
.xml
themes/MossyLawn.xml
.xml
themes/Navajo.xml
.xml
themes/Obsidian.xml
.xml
themes/Plastic Code Wrap.xml
.xml
themes/Ruby Blue.xml
.xml
themes/Solarized-light.xml
.xml
themes/Solarized.xml
.xml
themes/Twilight.xml
.xml
themes/Vibrant Ink.xml
.xml
themes/Zenburn.xml
.xml
themes/khaki.xml
.xml
themes/vim Dark Blue.xml
.xml
toolbarIcons.xml
.xml
updater/GUP.exe
.exe windows:6 windows x64 arch:x64

0b43764663ba024c8202f35227fe0bff

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

13/05/2022, 00:00

Not After

14/05/2025, 23:59

Subject

CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

db:ec:50:91:fd:e6:20:f5:84:bd:3b:bd:0f:ea:82:11:28:ce:a1:d1:ee:46:95:84:e1:00:a7:e1:11:4b:4a:f9
Signer

Actual PE Digest

db:ec:50:91:fd:e6:20:f5:84:bd:3b:bd:0f:ea:82:11:28:ce:a1:d1:ee:46:95:84:e1:00:a7:e1:11:4b:4a:f9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

libcurl

curl_easy_setopt
curl_easy_cleanup
curl_easy_init
curl_easy_perform

comctl32

InitCommonControlsEx

shlwapi

PathFileExistsA
PathFindExtensionW
PathIsDirectoryW
PathFileExistsW
PathFindFileNameW
PathRemoveFileSpecW

kernel32

CreateFileW
HeapSize
SetEndOfFile
HeapReAlloc
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
CreateDirectoryW
lstrlenW
GetCurrentThreadId
Sleep
OutputDebugStringW
DeleteFileW
CreateThread
lstrcpyW
lstrcmpW
MulDiv
MoveFileW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ReleaseSemaphore
InitializeCriticalSection
WriteConsoleW
CreateEventW
GetLastError
SetEvent
CloseHandle
ResetEvent
CreateSemaphoreW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetConsoleOutputCP
WaitForSingleObject
FlushFileBuffers
GetFileSizeEx
HeapAlloc
HeapFree
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
MultiByteToWideChar
WideCharToMultiByte
WakeConditionVariable
TryAcquireSRWLockExclusive
WaitForSingleObjectEx
GetExitCodeThread
RtlUnwind
InitializeCriticalSectionEx
EncodePointer
DecodePointer
GetLocaleInfoEx
LCMapStringEx
GetProcAddress
GetStringTypeW
CompareStringEx
GetCPInfo
RtlUnwindEx
RtlPcToFileHeader
RaiseException
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ReadFile
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
GetStdHandle
WriteFile
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType

user32

CallNextHookEx
EndDialog
SetWindowTextW
SetDlgItemTextW
CreateWindowExW
MessageBoxA
UnhookWindowsHookEx
SetWindowsHookExW
GetDlgItemInt
SystemParametersInfoW
SetDlgItemInt
DialogBoxParamW
LoadImageW
ReleaseDC
MessageBoxW
SendMessageW
SetWindowPos
GetDC
GetWindowRect
FindWindowExW
GetDlgItemTextW

gdi32

GetDeviceCaps

shell32

SHGetFolderPathW
ShellExecuteW
SHFileOperationW

Sections

.text
Size: 594KB - Virtual size: 593KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
updater/LICENSE
updater/README.md
updater/gup.xml
.xml
updater/libcurl.dll
.dll windows:6 windows x64 arch:x64

a10f6e22462d4c39354737b4fc5d8158

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

13/05/2022, 00:00

Not After

14/05/2025, 23:59

Subject

CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ae:e4:f9:9b:fe:e2:05:97:c9:f6:a8:c0:3d:ee:24:8a:ec:56:19:71:bf:b6:fc:f5:d0:e8:bb:7d:f6:38:a3:dc
Signer

Actual PE Digest

ae:e4:f9:9b:fe:e2:05:97:c9:f6:a8:c0:3d:ee:24:8a:ec:56:19:71:bf:b6:fc:f5:d0:e8:bb:7d:f6:38:a3:dc

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

ws2_32

send
WSAGetLastError
bind
sendto
recvfrom
WSACleanup
WSAStartup
select
__WSAFDIsSet
htonl
ioctlsocket
WSAWaitForMultipleEvents
WSASetEvent
WSAResetEvent
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
listen
accept
gethostname
freeaddrinfo
getaddrinfo
WSAIoctl
WSASetLastError
socket
setsockopt
recv
ntohs
htons
getsockopt
getsockname
getpeername
connect
closesocket

wldap32

ord46
ord217
ord211
ord301
ord200
ord30
ord79
ord35
ord33
ord32
ord27
ord26
ord22
ord41
ord50
ord45
ord60
ord143

advapi32

CryptAcquireContextA
CryptDestroyKey
CryptImportKey
CryptEncrypt
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptReleaseContext

crypt32

CertFreeCertificateContext
CryptDecodeObjectEx
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
CryptStringToBinaryA
PFXImportCertStore
CertAddCertificateContextToStore
CertFindExtension
CertGetNameStringA
CryptQueryObject
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFindCertificateInStore
CertFreeCertificateChain

normaliz

IdnToUnicode
IdnToAscii

bcrypt

BCryptGenRandom

kernel32

SetStdHandle
GetFileAttributesExW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
FlsFree
FlsSetValue
FlsGetValue
SetEndOfFile
HeapAlloc
HeapFree
GetConsoleOutputCP
WriteFile
ReadConsoleW
GetConsoleMode
GetModuleFileNameW
ExitProcess
SetFilePointerEx
GetModuleHandleExW
FreeLibraryAndExitThread
GetCurrentDirectoryW
GetFullPathNameW
HeapReAlloc
FlushFileBuffers
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
DeleteFileW
GetStringTypeW
GetTimeZoneInformation
HeapSize
WriteConsoleW
FlsAlloc
SetLastError
ExitThread
CreateThread
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetFileInformationByHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
SleepEx
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
GetProcAddress
CloseHandle
WaitForSingleObjectEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
GetEnvironmentVariableA
Sleep
MoveFileExA
GetCurrentProcessId
GetLastError
RtlUnwind
FormatMessageW
QueryPerformanceFrequency
GetSystemDirectoryA
GetModuleHandleA
LoadLibraryA
GetStdHandle
GetFileType
ReadFile
PeekNamedPipe
WaitForMultipleObjects
QueryPerformanceCounter
GetTickCount
VerSetConditionMask
VerifyVersionInfoW
CreateFileA
GetFileSizeEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
GetDriveTypeW
RtlUnwindEx
InterlockedFlushSList
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
CreateFileW

Exports

Exports

curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_header
curl_easy_init
curl_easy_nextheader
curl_easy_option_by_id
curl_easy_option_by_name
curl_easy_option_next
curl_easy_pause
curl_easy_perform
curl_easy_recv
curl_easy_reset
curl_easy_send
curl_easy_setopt
curl_easy_strerror
curl_easy_unescape
curl_easy_upkeep
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_global_sslset
curl_global_trace
curl_maprintf
curl_mfprintf
curl_mime_addpart
curl_mime_data
curl_mime_data_cb
curl_mime_encoder
curl_mime_filedata
curl_mime_filename
curl_mime_free
curl_mime_headers
curl_mime_init
curl_mime_name
curl_mime_subparts
curl_mime_type
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_get_handles
curl_multi_info_read
curl_multi_init
curl_multi_perform
curl_multi_poll
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_action
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_multi_wait
curl_multi_wakeup
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_pushheader_byname
curl_pushheader_bynum
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape
curl_url
curl_url_cleanup
curl_url_dup
curl_url_get
curl_url_set
curl_url_strerror
curl_version
curl_version_info
curl_ws_meta
curl_ws_recv
curl_ws_send

Sections

.text
Size: 534KB - Virtual size: 534KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
updater/updater.ico
userDefineLangs/markdown._preinstalled.udl.xml
userDefineLangs/markdown._preinstalled_DM.udl.xml

Sharing

General

Malware Config

Signatures

Files

2169fb6fba67793dc0466227f0861e58

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4aCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

c1:87:42:8c:be:43:5f:f5:82:40:d5:aa:91:a1:51:c8:01:ec:57:27:40:c8:c1:90:71:8f:ef:7e:57:69:b5:61Signer

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

shlwapi

shell32

dbghelp

version

crypt32

wintrust

sensapi

wininet

uxtheme

dwmapi

kernel32

user32

gdi32

comdlg32

advapi32

ole32

oleaut32

imm32

Exports

Exports

Sections

.text Size: 4.4MB - Virtual size: 4.4MB

.rdata Size: 1006KB - Virtual size: 1005KB

.data Size: 71KB - Virtual size: 92KB

.pdata Size: 119KB - Virtual size: 118KB

.rsrc Size: 1.5MB - Virtual size: 1.5MB

.reloc Size: 21KB - Virtual size: 20KB

c5d2c3c7e7bb46877c74a361a465d678

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4aCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

82:f4:3c:eb:f8:1e:fe:db:8e:19:33:aa:3c:1c:0d:e5:4b:37:44:3f:cf:b6:3d:ec:03:b7:00:48:48:c3:ed:11Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

Sections

.text Size: 54KB - Virtual size: 54KB

.rdata Size: 38KB - Virtual size: 37KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

c1:87:42:8c:be:43:5f:f5:82:40:d5:aa:91:a1:51:c8:01:ec:57:27:40:c8:c1:90:71:8f:ef:7e:57:69:b5:61
Signer

.text
Size: 4.4MB - Virtual size: 4.4MB

.rdata
Size: 1006KB - Virtual size: 1005KB

.data
Size: 71KB - Virtual size: 92KB

.pdata
Size: 119KB - Virtual size: 118KB

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

.reloc
Size: 21KB - Virtual size: 20KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

82:f4:3c:eb:f8:1e:fe:db:8e:19:33:aa:3c:1c:0d:e5:4b:37:44:3f:cf:b6:3d:ec:03:b7:00:48:48:c3:ed:11
Signer

.text
Size: 54KB - Virtual size: 54KB

.rdata
Size: 38KB - Virtual size: 37KB

.data
Size: 3KB - Virtual size: 7KB

.pdata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 92KB - Virtual size: 91KB

.reloc
Size: 2KB - Virtual size: 1KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

84:a7:dc:33:70:93:69:5e:43:04:fd:0e:55:99:d0:03:21:81:75:bd:c1:38:5b:1a:c0:a5:32:80:dd:a7:d7:9a
Signer

.text
Size: 121KB - Virtual size: 120KB

.rdata
Size: 50KB - Virtual size: 49KB

.data
Size: 4KB - Virtual size: 9KB

.pdata
Size: 7KB - Virtual size: 6KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 1KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

f3:a6:d3:86:9a:f7:27:61:b9:8a:41:7f:34:73:6e:4f:14:92:04:a8:15:b0:eb:3c:5b:b5:a3:41:1e:53:f7:a9
Signer

.text
Size: 84KB - Virtual size: 84KB

.rdata
Size: 46KB - Virtual size: 45KB

.data
Size: 3KB - Virtual size: 8KB