99fe6730862db95a23d5996996d99d55a809390b152bfdc15d617545016cbbe6[.]zip

Resubmissions

31/07/2024, 19:49

240731-yjqkmazfqp 10

30/04/2024, 21:42

240430-1kpe3agd3x 10

Sharing

Copy URL

Twitter E-mail

General

Target

99fe6730862db95a23d5996996d99d55a809390b152bfdc15d617545016cbbe6.zip
Size

8.5MB
MD5

1914923016185375510ebe77c41de172
SHA1

1526594013143e48da425decb19d7b4d00e85dc1
SHA256

99fe6730862db95a23d5996996d99d55a809390b152bfdc15d617545016cbbe6
SHA512

31232130dc9cc78e00dc38cf64c664bb2254afe75c14cb12bdc06d1abe207c3c0f06e9b3301f9910a6b1c07b63d73a4c70557286d0e149ccb600639363859bda
SSDEEP

196608:Lz1xWKqkGTSOwUDLMpvM4KBCmbhOj+UIs1mkSxCBND3R/:LzDb9Ownp/0lTsUnwND3R/

Score

1^/10

Malware Config

Signatures

Files

99fe6730862db95a23d5996996d99d55a809390b152bfdc15d617545016cbbe6.zip
.zip
npp.8.6.3.portable.x64/autoCompletion/BaanC.xml
.xml
npp.8.6.3.portable.x64/autoCompletion/actionscript.xml
.xml
npp.8.6.3.portable.x64/autoCompletion/autoit.xml
.xml
npp.8.6.3.portable.x64/autoCompletion/batch.xml
.xml
npp.8.6.3.portable.x64/autoCompletion/c.xml
.xml
npp.8.6.3.portable.x64/autoCompletion/cmake.xml
.xml
npp.8.6.3.portable.x64/autoCompletion/cobol.xml
.xml
npp.8.6.3.portable.x64/autoCompletion/coffee.xml
.xml
npp.8.6.3.portable.x64/autoCompletion/cpp.xml
.xml
npp.8.6.3.portable.x64/autoCompletion/cs.xml
.xml
npp.8.6.3.portable.x64/autoCompletion/css.xml
.xml
npp.8.6.3.portable.x64/autoCompletion/gdscript.xml
.js .xml polyglot
npp.8.6.3.portable.x64/autoCompletion/html.xml
.xml
npp.8.6.3.portable.x64/autoCompletion/java.xml
.xml
npp.8.6.3.portable.x64/autoCompletion/javascript.xml
.xml
npp.8.6.3.portable.x64/autoCompletion/lisp.xml
.xml
npp.8.6.3.portable.x64/autoCompletion/lua.xml
.xml
npp.8.6.3.portable.x64/autoCompletion/nsis.xml
.xml
npp.8.6.3.portable.x64/autoCompletion/perl.xml
.xml
npp.8.6.3.portable.x64/autoCompletion/php.xml
.xml
npp.8.6.3.portable.x64/autoCompletion/powershell.xml
.xml
npp.8.6.3.portable.x64/autoCompletion/python.xml
.xml
npp.8.6.3.portable.x64/autoCompletion/rc.xml
.xml
npp.8.6.3.portable.x64/autoCompletion/sql.xml
.xml
npp.8.6.3.portable.x64/autoCompletion/tex.xml
.xml
npp.8.6.3.portable.x64/autoCompletion/typescript.xml
.xml
npp.8.6.3.portable.x64/autoCompletion/vb.xml
.xml
npp.8.6.3.portable.x64/autoCompletion/vhdl.xml
.xml
npp.8.6.3.portable.x64/autoCompletion/xml.xml
.xml
npp.8.6.3.portable.x64/certificate.pem
npp.8.6.3.portable.x64/change.log
npp.8.6.3.portable.x64/config.xml
.xml
npp.8.6.3.portable.x64/contextMenu.xml
.xml
npp.8.6.3.portable.x64/contextModel.html
.exe windows:6 windows x64 arch:x64

f8f4a11ba928ad759ccd74a6aa21fdd9

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

97:a7:67:ff:8e:0f:fb:d1:8e:09:8e:0e:82:2d:70:15:74:ce:c7:fb:90:f5:17:cd:87:37:40:7b:f4:b1:bc:48
Signer

Actual PE Digest

97:a7:67:ff:8e:0f:fb:d1:8e:09:8e:0e:82:2d:70:15:74:ce:c7:fb:90:f5:17:cd:87:37:40:7b:f4:b1:bc:48

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\1\s\exe\x64\Release\vmmap64.pdb

Imports

gdiplus

GdiplusStartup
GdipDeleteBrush
GdipCreateSolidFill
GdipFillRectangleI
GdipSetCompositingQuality
GdipDeleteGraphics
GdipCreateFromHDC

shlwapi

SHAutoComplete
SHCreateStreamOnFileW

comctl32

ImageList_DrawEx
ImageList_ReplaceIcon
ImageList_SetBkColor
InitCommonControlsEx
ImageList_Destroy
ord17
ImageList_Create

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

kernel32

SetEndOfFile
SetFilePointer
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetTickCount
VirtualAlloc
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
ReadProcessMemory
GetNumberFormatW
OpenProcess
GetSystemTimeAsFileTime
GetEnvironmentVariableW
SetEnvironmentVariableW
LoadLibraryW
ReadFile
ConnectNamedPipe
CreateNamedPipeW
QueryPerformanceCounter
QueryPerformanceFrequency
GetOverlappedResult
SetEvent
CreateEventW
WaitForMultipleObjects
ResumeThread
FormatMessageW
GlobalAddAtomW
SetCurrentDirectoryW
FileTimeToLocalFileTime
QueryDosDeviceW
GetTempPathA
GetCurrentProcessId
CreateThread
OpenThread
SuspendThread
GetThreadContext
GlobalMemoryStatusEx
SetProcessWorkingSetSize
IsBadReadPtr
FileTimeToSystemTime
GetTimeFormatW
Process32FirstW
Process32NextW
Thread32First
Thread32Next
DebugBreak
VirtualQueryEx
ExitProcess
VirtualAllocEx
CreateFileW
WriteProcessMemory
IsWow64Process
WriteFile
GetCurrentThreadId
GetLocaleInfoW
SetFilePointerEx
ReadConsoleW
ReadConsoleInputW
SetConsoleMode
GetConsoleMode
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
HeapAlloc
HeapFree
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileInformationByHandle
FreeLibraryAndExitThread
ExitThread
GetConsoleCP
RtlUnwind
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
RtlUnwindEx
RaiseException
RtlPcToFileHeader
WideCharToMultiByte
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
WaitForSingleObjectEx
ResetEvent
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CompareStringW
Module32NextW
Module32FirstW
CreateToolhelp32Snapshot
GetModuleHandleExW
FreeLibrary
GetSystemInfo
SetStdHandle
GetTempPathW
FindFirstFileExW
IsValidCodePage
RemoveDirectoryW
FindNextFileW
FindFirstFileW
FindClose
DeleteFileW
CreateDirectoryW
CreateProcessW
Sleep
GetCurrentDirectoryW
VerifyVersionInfoW
FindResourceW
SizeofResource
LockResource
LoadResource
GetModuleFileNameW
TerminateProcess
GetCurrentProcess
WaitForSingleObject
GetLastError
CloseHandle
GetFileAttributesW
ExpandEnvironmentStringsW
VerSetConditionMask
LocalFree
LocalAlloc
GetProcAddress
GetFileType
GetCommandLineW
GetStdHandle
LoadLibraryExW
GetFileSize
GetVersionExW
SetLastError
MultiByteToWideChar
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
GetModuleHandleW
GetOEMCP
GetCPInfo
GetCommandLineA
GetEnvironmentStringsW
GetConsoleOutputCP
GetFileSizeEx
GetStringTypeW
FreeEnvironmentStringsW
GetProcessHeap
FlushFileBuffers
GetTimeZoneInformation
HeapSize
GetACP
WriteConsoleW
VirtualProtectEx
HeapReAlloc

user32

InsertMenuW
GetSubMenu
EnableMenuItem
CheckMenuItem
DrawMenuBar
GetMenuState
GetMenu
TranslateAcceleratorW
DestroyAcceleratorTable
LoadAcceleratorsW
IsWindowEnabled
KillTimer
SetTimer
GetActiveWindow
IsDlgButtonChecked
CheckDlgButton
CreateDialogParamW
IsZoomed
IsIconic
SetWindowPlacement
GetWindowPlacement
MoveWindow
DestroyWindow
PostQuitMessage
PostMessageW
DispatchMessageW
TranslateMessage
GetMessageW
DrawFrameControl
RegisterWindowMessageW
SetScrollInfo
GetClassLongPtrW
IntersectRect
ScrollWindowEx
GetUpdateRgn
EndPaint
SetMenuItemInfoW
SetActiveWindow
SetForegroundWindow
SetWindowTextA
GetWindowTextW
ChildWindowFromPoint
UnionRect
SetWindowLongW
GetClassLongW
GetDesktopWindow
EnumChildWindows
GetClassNameW
CheckMenuRadioItem
BeginPaint
ReleaseDC
GetKeyState
GetFocus
ShowWindow
CallWindowProcW
GetPropW
SetPropW
EnableWindow
SetFocus
GetDlgItemTextW
DestroyIcon
SetDlgItemTextW
DialogBoxParamW
SetWindowLongPtrW
GetWindowLongPtrW
OffsetRect
ScreenToClient
ReleaseCapture
SetCapture
GetCapture
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPos
CreateWindowExW
RegisterClassExW
DefWindowProcW
GetScrollInfo
FillRect
DrawFocusRect
MapWindowPoints
DrawTextW
LoadImageW
LoadIconW
GetWindowLongW
PtInRect
GetSysColor
GetWindowRect
GetClientRect
UpdateWindow
GetSystemMetrics
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
LoadStringW
LoadCursorW
InflateRect
GetSysColorBrush
SetCursor
SetWindowTextW
GetParent
MessageBoxW
InvalidateRect
GetDlgItem
EndDialog
DialogBoxIndirectParamW
SendMessageW
DrawEdge
GetMenuItemInfoW
DrawIconEx
IsDialogMessageW
GetDC

gdi32

FrameRgn
GetObjectW
CombineRgn
CreateRectRgn
Polyline
CreateRectRgnIndirect
GetTextMetricsW
SelectClipRgn
RectInRegion
GetBkColor
CreateFontIndirectW
Polygon
MoveToEx
SetBkMode
SelectObject
LineTo
DeleteObject
DeleteDC
CreateSolidBrush
CreatePen
GetStockObject
BitBlt
CreateCompatibleBitmap
CreateFontW
CreateCompatibleDC
SetBkColor
SetTextColor
ExtTextOutW
GetDeviceCaps
SetMapMode
StartDocW
EndDoc
StartPage
EndPage
GetTextExtentPoint32W

comdlg32

ChooseFontW
GetOpenFileNameW
FindTextW
ChooseColorW
PrintDlgW
GetSaveFileNameW

advapi32

OpenSCManagerW
EnumServicesStatusExW
CloseServiceHandle
LookupPrivilegeValueW
LookupAccountSidW
AdjustTokenPrivileges
RegSetValueW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
GetTokenInformation
FreeSid
EqualSid
AllocateAndInitializeSid
OpenProcessToken
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegOpenKeyW
RegEnumValueW
RegCreateKeyW
RegCloseKey

shell32

ord155
SHGetSpecialFolderLocation
ord190
SHGetFileInfoW
ShellExecuteW
CommandLineToArgvW
SHBrowseForFolderW
ShellExecuteExW
SHGetPathFromIDListW
SHGetMalloc
SHChangeNotify
SHBindToParent

ole32

CoInitialize
CoCreateInstance
CoTaskMemFree

oleaut32

SysStringLen
SysFreeString
VariantInit
VariantClear
VariantChangeType
SysAllocStringByteLen
SysAllocString

Sections

.text
Size: 391KB - Virtual size: 390KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourd
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
npp.8.6.3.portable.x64/functionList/ada.xml
.xml
npp.8.6.3.portable.x64/functionList/asm.xml
.xml
npp.8.6.3.portable.x64/functionList/autoit.xml
.xml
npp.8.6.3.portable.x64/functionList/baanc.xml
.xml
npp.8.6.3.portable.x64/functionList/bash.xml
.xml
npp.8.6.3.portable.x64/functionList/batch.xml
.xml
npp.8.6.3.portable.x64/functionList/c.xml
.xml
npp.8.6.3.portable.x64/functionList/cobol-free.xml
.xml
npp.8.6.3.portable.x64/functionList/cobol.xml
.xml
npp.8.6.3.portable.x64/functionList/cpp.xml
.xml
npp.8.6.3.portable.x64/functionList/cs.xml
.xml
npp.8.6.3.portable.x64/functionList/fortran.xml
.xml
npp.8.6.3.portable.x64/functionList/fortran77.xml
.xml
npp.8.6.3.portable.x64/functionList/gdscript.xml
.xml
npp.8.6.3.portable.x64/functionList/haskell.xml
.xml
npp.8.6.3.portable.x64/functionList/hollywood.xml
.xml
npp.8.6.3.portable.x64/functionList/ini.xml
.xml
npp.8.6.3.portable.x64/functionList/inno.xml
.xml
npp.8.6.3.portable.x64/functionList/java.xml
.xml
npp.8.6.3.portable.x64/functionList/javascript.js.xml
.xml
npp.8.6.3.portable.x64/functionList/krl.xml
.xml
npp.8.6.3.portable.x64/functionList/lua.xml
.xml
npp.8.6.3.portable.x64/functionList/nppexec.xml
.xml
npp.8.6.3.portable.x64/functionList/nsis.xml
.xml
npp.8.6.3.portable.x64/functionList/overrideMap.xml
.xml
npp.8.6.3.portable.x64/functionList/pascal.xml
.xml
npp.8.6.3.portable.x64/functionList/perl.xml
.xml
npp.8.6.3.portable.x64/functionList/php.xml
.xml
npp.8.6.3.portable.x64/functionList/powershell.xml
.xml
npp.8.6.3.portable.x64/functionList/python.xml
.xml
npp.8.6.3.portable.x64/functionList/ruby.xml
.xml
npp.8.6.3.portable.x64/functionList/rust.xml
.xml
npp.8.6.3.portable.x64/functionList/sinumerik.xml
.xml
npp.8.6.3.portable.x64/functionList/sql.xml
.xml
npp.8.6.3.portable.x64/functionList/typescript.xml
.xml
npp.8.6.3.portable.x64/functionList/universe_basic.xml
.xml
npp.8.6.3.portable.x64/functionList/vhdl.xml
.xml
npp.8.6.3.portable.x64/functionList/xml.xml
.xml
npp.8.6.3.portable.x64/langs.model.xml
.js .xml polyglot
npp.8.6.3.portable.x64/langs.xml
.js .xml polyglot
npp.8.6.3.portable.x64/langsMod.html
.exe windows:6 windows x64 arch:x64

d3598d8c3bcea975aea92cd5bbe9edc5

Code Sign

33:00:00:02:cc:8e:b5:96:a6:bd:d1:c9:4e:00:00:00:00:02:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:46

Not After

11/05/2023, 20:46

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

49:f1:16:24:cf:20:c1:47:1d:d2:f3:36:20:37:1d:a6:81:75:06:cc:36:b9:37:56:b9:e3:40:02:39:1a:44:91
Signer

Actual PE Digest

49:f1:16:24:cf:20:c1:47:1d:d2:f3:36:20:37:1d:a6:81:75:06:cc:36:b9:37:56:b9:e3:40:02:39:1a:44:91

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\1\s\x64\Release\ADExplorer64.pdb

Imports

netapi32

NetUserGetLocalGroups
NetUserGetGroups

rpcrt4

UuidFromStringW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

kernel32

GetConsoleMode
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
HeapQueryInformation
HeapSize
HeapReAlloc
FreeLibraryAndExitThread
ResumeThread
ExitThread
CreateThread
GetConsoleCP
GetModuleHandleExW
ExitProcess
TlsFree
EncodePointer
RtlUnwindEx
GetProcessHeap
HeapFree
HeapAlloc
WideCharToMultiByte
RaiseException
InitializeSListHead
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
ReadConsoleInputW
ReadConsoleW
GetFileSizeEx
SetFilePointerEx
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetEnvironmentStringsW
LoadLibraryExA
ExpandEnvironmentStringsA
WriteFile
FreeLibrary
FileTimeToLocalFileTime
GetCurrentProcess
GetSystemTimeAsFileTime
GetSystemInfo
GetLastError
Sleep
GetFileSize
OutputDebugStringW
MultiByteToWideChar
GetSystemDirectoryW
CreateFileW
ReadFile
TlsGetValue
TlsAlloc
FormatMessageW
GetSystemDefaultLangID
GetUserDefaultLangID
TlsSetValue
GetDateFormatW
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
GetTimeFormatW
FileTimeToSystemTime
GetTimeZoneInformation
CompareFileTime
GlobalUnlock
GetTickCount
MapViewOfFile
CreateFileMappingW
VerifyVersionInfoW
VerSetConditionMask
DeleteCriticalSection
GlobalLock
RtlUnwind
CloseHandle
GlobalFree
DeleteFileW
GlobalAlloc
UnmapViewOfFile
SetConsoleMode
GetFileAttributesW
SetEndOfFile
SetFilePointer
InitializeCriticalSection
LeaveCriticalSection
GetModuleFileNameW
EnterCriticalSection
CompareStringW
GetFileType
GetModuleHandleW
LocalFree
GetProcAddress
LocalAlloc
GetStdHandle
GetCommandLineW
LoadLibraryExW
GetVersionExW
SetLastError
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW
FlushFileBuffers
GetConsoleOutputCP
WriteConsoleW
RtlPcToFileHeader

user32

GetDlgItem
GetWindowRect
PostMessageW
CallWindowProcW
LoadMenuW
DefWindowProcW
GetMenuItemInfoW
DeferWindowPos
CreateDialogParamW
GetMessageW
GetWindowTextLengthW
GetWindowLongW
CopyIcon
GetSysColorBrush
GetMenu
GetFocus
InsertMenuItemW
DestroyWindow
IsWindowVisible
SetWindowPos
MessageBoxW
GetPropW
GetMenuItemCount
EnumChildWindows
SetWindowLongPtrW
CreateWindowExW
DeleteMenu
ScreenToClient
GetSystemMetrics
MessageBeep
CreatePopupMenu
MsgWaitForMultipleObjects
GetWindowLongPtrW
RegisterClassExW
GetWindowPlacement
LoadAcceleratorsW
TrackPopupMenu
SetCursor
LoadCursorW
DialogBoxIndirectParamW
SetWindowTextW
EndDialog
SendMessageW
InflateRect
GetWindowTextW
EndPaint
GetSubMenu
GetActiveWindow
ShowWindow
BeginDeferWindowPos
OpenClipboard
OffsetRect
DispatchMessageW
IsDialogMessageW
DestroyIcon
ClientToScreen
CloseClipboard
EmptyClipboard
PeekMessageW
SetDlgItemTextW
MapWindowPoints
SetWindowPlacement
SetMenuDefaultItem
GetDlgItemTextW
SendDlgItemMessageW
GetSysColor
MoveWindow
IsDlgButtonChecked
DestroyMenu
SetFocus
TranslateAcceleratorW
SetPropW
TranslateMessage
LoadIconW
GetClassNameW
DrawMenuBar
SetCapture
EndDeferWindowPos
SetClipboardData
GetDlgItemInt
SetWindowLongW
CheckMenuItem
GetClientRect
IsZoomed
AppendMenuW
DrawTextW
CheckDlgButton
PostQuitMessage
EnableMenuItem
MenuItemFromPoint
SetDlgItemInt
GetParent
DialogBoxParamW
PtInRect
UpdateWindow
DrawFrameControl
ReleaseCapture
LoadImageW
InvalidateRect
ChildWindowFromPoint
BeginPaint
EnableWindow

gdi32

EndPage
SelectObject
GetStockObject
SetTextColor
SetBkMode
GetObjectW
ExtTextOutW
StartPage
EndDoc
SetMapMode
StartDocW
SetBkColor
CreateFontIndirectW
GetDeviceCaps

comdlg32

PrintDlgW
GetSaveFileNameW
GetOpenFileNameW

advapi32

ConvertSecurityDescriptorToStringSecurityDescriptorW
ConvertStringSidToSidW
ConvertSidToStringSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetLengthSid
RegDeleteValueW
GetSidIdentifierAuthority
RegEnumValueW
RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegCreateKeyW
RegOpenKeyW
RegQueryValueExW
LookupAccountSidW
MapGenericMask
IsValidSid
GetSecurityDescriptorOwner
GetSidSubAuthority
GetSecurityDescriptorGroup
AllocateAndInitializeSid
GetSecurityDescriptorLength
RegOpenKeyExA
RegQueryValueExA
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
GetSidSubAuthorityCount
GetSecurityDescriptorDacl
GetAce
EqualSid

shell32

CommandLineToArgvW
ShellExecuteW

ole32

StringFromGUID2
CoCreateInstance
CoUninitialize
CreateBindCtx
CoInitialize
IIDFromString

oleaut32

SafeArrayAccessData
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayGetLBound
SysFreeString
SysAllocStringByteLen
SysAllocString
VarDateFromStr
SysStringLen
VariantInit
VariantChangeType
VariantClear

comctl32

ImageList_Draw
ImageList_EndDrag
PropertySheetW
CreateToolbarEx
ImageList_DragLeave
ord17
CreateStatusWindowW
ImageList_Create
ImageList_DragEnter
ImageList_ReplaceIcon
ImageList_BeginDrag
CreatePropertySheetPageW
ImageList_DragMove

activeds

ord20
ord15
ord12
ord13
ord7
ord9

wldap32

ord188
ord88
ord73
ord118
ord145
ord13
ord14
ord155

Sections

.text
Size: 390KB - Virtual size: 389KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
npp.8.6.3.portable.x64/license.txt
npp.8.6.3.portable.x64/localization/abkhazian.xml
.xml
npp.8.6.3.portable.x64/localization/afrikaans.xml
.xml
npp.8.6.3.portable.x64/localization/albanian.xml
.xml
npp.8.6.3.portable.x64/localization/arabic.xml
.xml
npp.8.6.3.portable.x64/localization/aragonese.xml
.xml
npp.8.6.3.portable.x64/localization/aranese.xml
.xml
npp.8.6.3.portable.x64/localization/azerbaijani.xml
.xml
npp.8.6.3.portable.x64/localization/basque.xml
.xml
npp.8.6.3.portable.x64/localization/belarusian.xml
.xml
npp.8.6.3.portable.x64/localization/bengali.xml
.xml
npp.8.6.3.portable.x64/localization/bosnian.xml
.xml
npp.8.6.3.portable.x64/localization/brazilian_portuguese.xml
.xml
npp.8.6.3.portable.x64/localization/breton.xml
.xml
npp.8.6.3.portable.x64/localization/bulgarian.xml
.xml
npp.8.6.3.portable.x64/localization/catalan.xml
.xml
npp.8.6.3.portable.x64/localization/chineseSimplified.xml
.xml
npp.8.6.3.portable.x64/localization/corsican.xml
.xml
npp.8.6.3.portable.x64/localization/croatian.xml
.xml
npp.8.6.3.portable.x64/localization/czech.xml
.xml
npp.8.6.3.portable.x64/localization/danish.xml
.xml
npp.8.6.3.portable.x64/localization/dutch.xml
.xml
npp.8.6.3.portable.x64/localization/english.xml
.xml
npp.8.6.3.portable.x64/localization/english_customizable.xml
.xml
npp.8.6.3.portable.x64/localization/esperanto.xml
.xml
npp.8.6.3.portable.x64/localization/estonian.xml
.xml
npp.8.6.3.portable.x64/localization/extremaduran.xml
.xml
npp.8.6.3.portable.x64/localization/farsi.xml
.xml
npp.8.6.3.portable.x64/localization/finnish.xml
.xml
npp.8.6.3.portable.x64/localization/french.xml
.xml
npp.8.6.3.portable.x64/localization/friulian.xml
.xml
npp.8.6.3.portable.x64/localization/galician.xml
.xml
npp.8.6.3.portable.x64/localization/georgian.xml
.xml
npp.8.6.3.portable.x64/localization/german.xml
.xml
npp.8.6.3.portable.x64/localization/greek.xml
.xml
npp.8.6.3.portable.x64/localization/gujarati.xml
.xml
npp.8.6.3.portable.x64/localization/hebrew.xml
.xml
npp.8.6.3.portable.x64/localization/hindi.xml
.xml
npp.8.6.3.portable.x64/localization/hongKongCantonese.xml
.xml
npp.8.6.3.portable.x64/localization/hungarian.xml
.xml
npp.8.6.3.portable.x64/localization/indonesian.xml
.xml
npp.8.6.3.portable.x64/localization/irish.xml
.xml
npp.8.6.3.portable.x64/localization/italian.xml
.xml
npp.8.6.3.portable.x64/localization/japanese.xml
.xml
npp.8.6.3.portable.x64/localization/kabyle.xml
.xml
npp.8.6.3.portable.x64/localization/kannada.xml
.xml
npp.8.6.3.portable.x64/localization/kazakh.xml
.xml
npp.8.6.3.portable.x64/localization/korean.xml
.xml
npp.8.6.3.portable.x64/localization/kurdish.xml
.xml
npp.8.6.3.portable.x64/localization/kyrgyz.xml
.xml
npp.8.6.3.portable.x64/localization/latvian.xml
.xml
npp.8.6.3.portable.x64/localization/ligurian.xml
.xml
npp.8.6.3.portable.x64/localization/lithuanian.xml
.xml
npp.8.6.3.portable.x64/localization/luxembourgish.xml
.xml
npp.8.6.3.portable.x64/localization/macedonian.xml
.xml
npp.8.6.3.portable.x64/localization/malay.xml
npp.8.6.3.portable.x64/localization/marathi.xml
.xml
npp.8.6.3.portable.x64/localization/mongolian.xml
.xml
npp.8.6.3.portable.x64/localization/nepali.xml
.xml
npp.8.6.3.portable.x64/localization/norwegian.xml
.xml
npp.8.6.3.portable.x64/localization/nynorsk.xml
.xml
npp.8.6.3.portable.x64/localization/occitan.xml
.xml
npp.8.6.3.portable.x64/localization/piglatin.xml
.xml
npp.8.6.3.portable.x64/localization/polish.xml
.xml
npp.8.6.3.portable.x64/localization/portuguese.xml
.xml
npp.8.6.3.portable.x64/localization/punjabi.xml
.xml
npp.8.6.3.portable.x64/localization/romanian.xml
.xml
npp.8.6.3.portable.x64/localization/russian.xml
.xml
npp.8.6.3.portable.x64/localization/samogitian.xml
.xml
npp.8.6.3.portable.x64/localization/sardinian.xml
.xml
npp.8.6.3.portable.x64/localization/serbian.xml
.xml
npp.8.6.3.portable.x64/localization/serbianCyrillic.xml
.xml
npp.8.6.3.portable.x64/localization/sinhala.xml
.xml
npp.8.6.3.portable.x64/localization/slovak.xml
.xml
npp.8.6.3.portable.x64/localization/slovenian.xml
.xml
npp.8.6.3.portable.x64/localization/spanish.xml
.xml
npp.8.6.3.portable.x64/localization/spanish_ar.xml
.xml
npp.8.6.3.portable.x64/localization/swedish.xml
.xml
npp.8.6.3.portable.x64/localization/tagalog.xml
.xml
npp.8.6.3.portable.x64/localization/taiwaneseMandarin.xml
.xml
npp.8.6.3.portable.x64/localization/tajikCyrillic.xml
.xml
npp.8.6.3.portable.x64/localization/tamil.xml
.xml
npp.8.6.3.portable.x64/localization/tatar.xml
.xml
npp.8.6.3.portable.x64/localization/telugu.xml
.xml
npp.8.6.3.portable.x64/localization/thai.xml
.xml
npp.8.6.3.portable.x64/localization/turkish.xml
.xml
npp.8.6.3.portable.x64/localization/ukrainian.xml
.xml
npp.8.6.3.portable.x64/localization/urdu.xml
.xml
npp.8.6.3.portable.x64/localization/uyghur.xml
.xml
npp.8.6.3.portable.x64/localization/uzbek.xml
.xml
npp.8.6.3.portable.x64/localization/uzbekCyrillic.xml
.xml
npp.8.6.3.portable.x64/localization/venetian.xml
.xml
npp.8.6.3.portable.x64/localization/vietnamese.xml
.xml
npp.8.6.3.portable.x64/localization/welsh.xml
.xml
npp.8.6.3.portable.x64/localization/zulu.xml
.xml
npp.8.6.3.portable.x64/notepad.exe
.exe windows:6 windows x64 arch:x64

c5eadffc22c44b9639010ac1e5d281fc

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

13/05/2022, 00:00

Not After

14/05/2025, 23:59

Subject

CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ce:5f:ef:48:b8:c6:19:f5:3e:b3:36:98:72:c6:f3:9a:6e:a3:1e:29:3b:25:d2:3c:6f:ae:23:88:f8:97:74:54
Signer

Actual PE Digest

ce:5f:ef:48:b8:c6:19:f5:3e:b3:36:98:72:c6:f3:9a:6e:a3:1e:29:3b:25:d2:3c:6f:ae:23:88:f8:97:74:54

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

comctl32

ImageList_DragShowNolock
ImageList_DragEnter
ImageList_DragMove
ImageList_BeginDrag
ord381
ImageList_Remove
ord17
ImageList_SetIconSize
ImageList_AddMasked
InitCommonControlsEx
ImageList_Destroy
ImageList_Create
ImageList_ReplaceIcon
_TrackMouseEvent
ImageList_Draw
ImageList_GetImageInfo
ord412
ord411
ord410
ImageList_EndDrag
ord413

shlwapi

ColorRGBToHLS
ColorHLSToRGB
PathStripPathW
PathAddExtensionW
PathAppendW
PathFindFileNameW
PathRemoveExtensionW
ColorAdjustLuma
PathIsDirectoryW
PathCombineW
PathIsRelativeW
AssocQueryStringW
PathCompactPathExW
PathGetDriveNumberW
PathMatchSpecW
PathFindExtensionW
PathFileExistsW
PathRemoveFileSpecW

shell32

SHFileOperationW
SHCreateItemFromParsingName
Shell_NotifyIconW
SHGetFolderPathW
ord165
ShellExecuteW
DragFinish
DragQueryPoint
DragQueryFileW

dbghelp

ImageNtHeader

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

crypt32

CertNameToStrW
CertGetCertificateContextProperty
CertGetNameStringW
CertFindCertificateInStore
CryptMsgGetParam
CertCloseStore
CryptQueryObject
CryptMsgClose

wintrust

WinVerifyTrust

sensapi

IsNetworkAlive
IsDestinationReachableW

wininet

InternetCrackUrlW

imm32

ImmGetContext
ImmReleaseContext
ImmSetConversionStatus
ImmNotifyIME
ImmSetCandidateWindow
ImmSetCompositionStringW
ImmEscapeW
ImmGetCompositionStringW
ImmSetCompositionWindow
ImmSetCompositionFontW
ImmGetOpenStatus

uxtheme

GetThemeFont
EndBufferedAnimation
SetWindowTheme
GetThemeTransitionDuration
DrawThemeParentBackground
CloseThemeData
GetThemePartSize
DrawThemeBackground
OpenThemeData
GetThemeBackgroundContentRect
EnableThemeDialogTexture
DrawThemeTextEx
BufferedPaintStopAllAnimations
BeginBufferedAnimation
BufferedPaintRenderAnimation

dwmapi

DwmSetWindowAttribute

kernel32

SystemTimeToTzSpecificLocalTime
GetDateFormatW
GlobalLock
GlobalUnlock
WriteFile
GetTimeFormatEx
CreateFileW
GetDateFormatEx
FormatMessageW
GlobalAlloc
CloseHandle
GetLocalTime
GetCurrentDirectoryW
SetFilePointerEx
LCMapStringW
FlushFileBuffers
SetFileTime
FindFirstStreamW
FormatMessageA
lstrcpynW
ExpandEnvironmentStringsW
SetCurrentDirectoryW
SizeofResource
LockResource
LoadResource
FindResourceW
FreeLibrary
WaitForSingleObject
CreateEventW
SetEvent
CreateThread
ResetEvent
CopyFileW
GetCurrentProcess
GetCurrentProcessId
CreateMutexW
ReleaseMutex
Sleep
GlobalSize
GetApplicationRestartSettings
UnregisterApplicationRestart
lstrcmpiA
RegisterApplicationRestart
WaitForMultipleObjects
FindClose
GetVersionExW
GetSystemInfo
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
lstrcpynA
SetLastError
GetTempPathW
CancelIo
WaitForSingleObjectEx
QueueUserAPC
SleepEx
ReadDirectoryChangesW
GetLocaleInfoA
GetTickCount
GetStringTypeExW
LCMapStringA
GetStringTypeExA
GetUserDefaultLCID
LoadLibraryA
WriteConsoleW
GetSystemTimeAsFileTime
MoveFileExW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
LCMapStringEx
GetLocaleInfoEx
DecodePointer
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetNativeSystemInfo
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
GetModuleHandleExW
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
IsProcessorFeaturePresent
RaiseException
RtlPcToFileHeader
InitOnceBeginInitialize
InitOnceComplete
QueryPerformanceFrequency
QueryPerformanceCounter
GetStringTypeW
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
GetTimeFormatW
DeleteFileW
GetDiskFreeSpaceExW
FileTimeToSystemTime
GetFileAttributesExW
SetFileAttributesW
GetLongPathNameW
SetEndOfFile
HeapSize
lstrlenW
FindNextFileW
FindFirstFileW
WideCharToMultiByte
MultiByteToWideChar
GlobalFree
GetVersion
GetACP
GetModuleFileNameW
MulDiv
lstrcmpW
GetCurrentThreadId
LocalFree
GetLastError
LocalAlloc
LoadLibraryExW
lstrcmpiW
GetModuleHandleW
GetProcAddress
VirtualProtect
CompareStringEx
GetCPInfo
InitializeCriticalSectionAndSpinCount
GetFullPathNameW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
RtlUnwindEx
TlsAlloc
TlsGetValue
lstrcpyW
CompareFileTime
CreateDirectoryW
GetFileAttributesW
TlsSetValue
TlsFree
RtlUnwind
ReadFile
ExitProcess
ExitThread
FreeLibraryAndExitThread
GetStdHandle
HeapAlloc
HeapFree
GetFileType
SetStdHandle
GetConsoleMode
ReadConsoleW
CompareStringW
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesW
GetTimeZoneInformation
GetFileSizeEx
GetConsoleOutputCP
IsValidCodePage
GetOEMCP
HeapReAlloc
FindFirstFileExW
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
CopyFileExW

user32

RegisterWindowMessageW
ScrollWindow
RemovePropW
GetPropW
InsertMenuItemW
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
KillTimer
GetCaretBlinkTime
AppendMenuA
GetMessageTime
ValidateRect
SetTimer
DestroyCursor
MsgWaitForMultipleObjects
NotifyWinEvent
GetUpdateRgn
SystemParametersInfoA
GetDoubleClickTime
DrawTextA
CopyImage
MonitorFromPoint
AdjustWindowRectEx
LoadStringW
LoadStringA
AppendMenuW
ModifyMenuW
GetMenuItemID
GetSubMenu
GetMenuStringW
RemoveMenu
GetIconInfo
CreateIconIndirect
LoadIconW
WindowFromPoint
LockWindowUpdate
mouse_event
GetDesktopWindow
GetDCEx
GetDlgItemTextA
SetScrollInfo
GetScrollInfo
GetWindowTextLengthW
GetMessageW
UnregisterClassW
RegisterClassExW
TrackPopupMenu
DispatchMessageW
DestroyIcon
MessageBoxA
TranslateMessage
FlashWindowEx
PostQuitMessage
BringWindowToTop
SetCapture
GetSysColorBrush
ReleaseCapture
GetKeyState
RedrawWindow
IsChild
SetParent
FindWindowExW
CallNextHookEx
GetKeyboardLayout
UnhookWindowsHookEx
SetWindowsHookExW
GetMenuState
GetMenuItemCount
CreatePopupMenu
SetMenuItemInfoW
DestroyMenu
InsertMenuW
CheckMenuItem
EnableMenuItem
CreateMenu
IsWindow
EmptyClipboard
SetClipboardData
GetDlgItemInt
SetDlgItemInt
CreateDialogParamW
IsWindowVisible
ShowWindow
ClientToScreen
RegisterClipboardFormatW
SetClipboardViewer
MessageBoxW
GetCapture
ChangeClipboardChain
CloseClipboard
GetClipboardData
IsClipboardFormatAvailable
GetWindowLongW
ShowScrollBar
PostMessageW
GetMenu
DestroyWindow
GetDC
HideCaret
CreateWindowExW
MessageBeep
GetScrollPos
GetWindowPlacement
GetKeyboardState
SetCaretPos
GetScrollRange
CreateCaret
RegisterClassW
SetWindowPlacement
DrawTextExW
LoadCursorW
DestroyCaret
SetCursor
SetScrollRange
LoadBitmapW
SetRectEmpty
MonitorFromRect
CreateDialogIndirectParamW
ShowCursor
CreateAcceleratorTableW
FindWindowW
IsCharLowerW
CharUpperW
CharLowerW
IsCharAlphaNumericW
IsCharAlphaW
ShowCaret
SetScrollPos
DrawIcon
DrawEdge
GetParent
UpdateWindow
DrawFrameControl
ToAscii
MoveWindow
EndDialog
SendDlgItemMessageW
DialogBoxIndirectParamW
SetFocus
DrawIconEx
DialogBoxParamW
LoadImageW
EnableWindow
GetMenuItemInfoW
DefWindowProcW
GetWindowRect
GetFocus
InflateRect
SetWindowPos
EnumChildWindows
FillRect
ScreenToClient
GetSystemMetrics
GetMenuBarInfo
OffsetRect
MapWindowPoints
TrackMouseEvent
FrameRect
DrawFocusRect
GetSysColor
IsWindowEnabled
IntersectRect
GetClassNameW
GetWindowDC
EnumThreadWindows
GetComboBoxInfo
GetClientRect
DrawTextW
PtInRect
InvalidateRect
ChildWindowFromPoint
ReleaseDC
GetCursorPos
BeginPaint
EndPaint
GetWindowTextW
CallWindowProcW
SetWindowLongPtrW
SendMessageW
SetWindowTextW
GetWindowLongPtrW
GetDlgCtrlID
SetDlgItemTextW
GetDlgItemTextW
SetDlgItemTextA
GetDlgItem
wsprintfW
SetPropW
SystemParametersInfoW
GetAncestor
SetLayeredWindowAttributes
GetLastActivePopup
LoadMenuW
GetClassNameA
GetWindowTextA
IsDialogMessageW
SetMenu
CheckMenuRadioItem
MonitorFromWindow
DeleteMenu
SetMenuItemBitmaps
ChildWindowFromPointEx
GetMonitorInfoW
DestroyAcceleratorTable
TranslateAcceleratorW
DrawMenuBar
IsZoomed
SetForegroundWindow
OpenClipboard
IsIconic
GetActiveWindow

gdi32

SetWindowOrgEx
CreateBitmap
BitBlt
GetTextMetricsW
SaveDC
GetObjectW
RestoreDC
CreateCompatibleBitmap
CreateCompatibleDC
GetDeviceCaps
GetPixel
OffsetWindowOrgEx
CreatePatternBrush
PatBlt
SetBrushOrgEx
SetDIBits
GetDIBits
EnumFontFamiliesExW
EndPage
DPtoLP
StartDocW
ExtTextOutW
SetTextAlign
DeleteDC
StartPage
GetTextExtentPointW
StretchBlt
CombineRgn
IntersectClipRect
Ellipse
Polygon
ExtCreatePen
GetTextExtentExPointA
GdiAlphaBlend
GetTextExtentExPointW
GetTextExtentPoint32A
CreateDIBSection
ExtTextOutA
LineTo
MoveToEx
CreateHatchBrush
Rectangle
SetROP2
GetROP2
SelectObject
GetClipRgn
GetStockObject
CreateRectRgnIndirect
Polyline
CreateRectRgn
GetTextExtentPoint32W
SetTextColor
SetBkMode
CreatePen
SelectClipRgn
ExcludeClipRect
SetBkColor
DeleteObject
CreateSolidBrush
CreateFontIndirectW
EndDoc
CreateFontW
RoundRect

comdlg32

PrintDlgW
ChooseColorW

advapi32

CryptReleaseContext
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptAcquireContextW
RegGetValueW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
CheckTokenMembership
FreeSid
AllocateAndInitializeSid
RegDeleteValueW
RegSetValueExW
RegEnumKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegQueryInfoKeyW
IsTextUnicode

ole32

CLSIDFromProgID
RegisterDragDrop
OleInitialize
DoDragDrop
OleUninitialize
ReleaseStgMedium
CoGetApartmentType
CoGetObjectContext
CoUninitialize
CoInitialize
CoTaskMemFree
CoCreateInstance
RevokeDragDrop

oleaut32

SysFreeString
SysAllocStringLen

Exports

Exports

CreateLexer
GetLexerCount
GetLexerFactory
GetLexerName
GetLibraryPropertyNames
GetNameSpace
LexerNameFromID
SetLibraryProperty

Sections

.text
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1005KB - Virtual size: 1004KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
npp.8.6.3.portable.x64/plugins/Config/converter.ini
npp.8.6.3.portable.x64/plugins/Config/nppPluginList.dll
.dll windows:6 windows x64 arch:x64

c5d2c3c7e7bb46877c74a361a465d678

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

13/05/2022, 00:00

Not After

14/05/2025, 23:59

Subject

CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a0:48:95:57:f8:07:90:8d:40:93:77:75:93:51:ef:a6:aa:3a:cf:87:3e:8a:77:05:5e:4c:a3:58:2e:d9:81:ed
Signer

Actual PE Digest

a0:48:95:57:f8:07:90:8d:40:93:77:75:93:51:ef:a6:aa:3a:cf:87:3e:8a:77:05:5e:4c:a3:58:2e:d9:81:ed

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\sources\nppPluginList\bin64\nppPluginList.pdb

Imports

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
WriteConsoleW

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
npp.8.6.3.portable.x64/plugins/NppConverter/NppConverter.dll
.dll windows:6 windows x64 arch:x64

85c9dfabb66649f3d6c7678b63060706

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

13/05/2022, 00:00

Not After

14/05/2025, 23:59

Subject

CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

84:a7:dc:33:70:93:69:5e:43:04:fd:0e:55:99:d0:03:21:81:75:bd:c1:38:5b:1a:c0:a5:32:80:dd:a7:d7:9a
Signer

Actual PE Digest

84:a7:dc:33:70:93:69:5e:43:04:fd:0e:55:99:d0:03:21:81:75:bd:c1:38:5b:1a:c0:a5:32:80:dd:a7:d7:9a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

shlwapi

PathFindFileNameW
PathFileExistsW

kernel32

InterlockedFlushSList
SetEndOfFile
lstrlenW
GlobalAlloc
GlobalLock
GlobalUnlock
SizeofResource
GetLastError
LockResource
GlobalFree
LoadResource
FindResourceW
GetPrivateProfileIntW
GetModuleFileNameW
GetPrivateProfileSectionNamesW
lstrcpyW
WriteConsoleW
HeapReAlloc
HeapSize
CreateFileW
ReadConsoleW
ReadFile
SetStdHandle
GetStringTypeW
GetProcessHeap
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
CloseHandle
GetFileSizeEx
SetFilePointerEx
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo

user32

ShowWindow
MoveWindow
SetFocus
GetDlgItem
UpdateWindow
InvalidateRect
GetWindowTextW
CreateDialogParamW
GetWindowRect
SetWindowLongPtrW
IsWindowVisible
MessageBoxA
GetClientRect
CreateDialogIndirectParamW
RegisterClipboardFormatW
SendMessageW
OpenClipboard
CloseClipboard
EmptyClipboard
SendDlgItemMessageW
SendDlgItemMessageA
SetClipboardData
DestroyWindow
MessageBoxW
GetWindowLongPtrW

Exports

Exports

beNotified
getFuncsArray
getName
isUnicode
messageProc
setInfo

Sections

.text
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
npp.8.6.3.portable.x64/plugins/NppExport/NppExport.dll
.dll windows:6 windows x64 arch:x64

17ff9a294f3152c5c744802081c5e1c4

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

13/05/2022, 00:00

Not After

14/05/2025, 23:59

Subject

CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f3:a6:d3:86:9a:f7:27:61:b9:8a:41:7f:34:73:6e:4f:14:92:04:a8:15:b0:eb:3c:5b:b5:a3:41:1e:53:f7:a9
Signer

Actual PE Digest

f3:a6:d3:86:9a:f7:27:61:b9:8a:41:7f:34:73:6e:4f:14:92:04:a8:15:b0:eb:3c:5b:b5:a3:41:1e:53:f7:a9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameW
MulDiv
lstrcpynW
lstrcpyW
lstrcatW
MultiByteToWideChar
WriteConsoleW
CloseHandle
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
SetStdHandle
GetStringTypeW
WriteFile
CreateFileW
lstrcmpiA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
SetFilePointerEx
GetProcessHeap
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW

user32

GetDC
EmptyClipboard
ReleaseDC
CloseClipboard
OpenClipboard
SendMessageW
MessageBoxW
RegisterClipboardFormatW
SetClipboardData

gdi32

GetTextExtentPoint32W
GetDeviceCaps
DeleteObject
CreateFontW
SelectObject

comdlg32

GetSaveFileNameW

shlwapi

PathFindFileNameW
PathRemoveExtensionW
PathRemoveFileSpecW

Exports

Exports

beNotified
getFuncsArray
getName
isUnicode
messageProc
setInfo

Sections

.text
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
npp.8.6.3.portable.x64/plugins/mimeTools/mimeTools.dll
.dll windows:6 windows x64 arch:x64

f36567aa27bb971fb945309de8037ee5

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

13/05/2022, 00:00

Not After

14/05/2025, 23:59

Subject

CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

15:08:90:35:fe:9a:ba:c5:57:e9:7d:e2:2d:a7:32:1f:3e:73:5f:72:1d:1c:b7:dc:7f:76:f5:6a:87:23:4a:66
Signer

Actual PE Digest

15:08:90:35:fe:9a:ba:c5:57:e9:7d:e2:2d:a7:32:1f:3e:73:5f:72:1d:1c:b7:dc:7f:76:f5:6a:87:23:4a:66

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyW
WriteConsoleW
CloseHandle
CreateFileW
SetFilePointerEx
GetConsoleMode
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP

user32

GetClientRect
ClientToScreen
CreateDialogParamW
SetWindowPos
SendMessageW
EndDialog
MessageBoxW

Exports

Exports

beNotified
getFuncsArray
getName
isUnicode
messageProc
setInfo

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
npp.8.6.3.portable.x64/readme.txt
npp.8.6.3.portable.x64/session.xml
.xml
npp.8.6.3.portable.x64/shortcuts.xml
.xml
npp.8.6.3.portable.x64/stylers.model.xml
.xml
npp.8.6.3.portable.x64/stylers.xml
.xml
npp.8.6.3.portable.x64/tabContextMenu_example.xml
.xml
npp.8.6.3.portable.x64/themes/Bespin.xml
.xml
npp.8.6.3.portable.x64/themes/Black board.xml
.xml
npp.8.6.3.portable.x64/themes/Choco.xml
.xml
npp.8.6.3.portable.x64/themes/DansLeRuSH-Dark.xml
.xml
npp.8.6.3.portable.x64/themes/DarkModeDefault.xml
.xml
npp.8.6.3.portable.x64/themes/Deep Black.xml
.xml
npp.8.6.3.portable.x64/themes/Hello Kitty.xml
.xml
npp.8.6.3.portable.x64/themes/HotFudgeSundae.xml
.xml
npp.8.6.3.portable.x64/themes/Mono Industrial.xml
.xml
npp.8.6.3.portable.x64/themes/Monokai.xml
.xml
npp.8.6.3.portable.x64/themes/MossyLawn.xml
.xml
npp.8.6.3.portable.x64/themes/Navajo.xml
.xml
npp.8.6.3.portable.x64/themes/Obsidian.xml
.xml
npp.8.6.3.portable.x64/themes/Plastic Code Wrap.xml
.xml
npp.8.6.3.portable.x64/themes/Ruby Blue.xml
.xml
npp.8.6.3.portable.x64/themes/Solarized-light.xml
.xml
npp.8.6.3.portable.x64/themes/Solarized.xml
.xml
npp.8.6.3.portable.x64/themes/Twilight.xml
.xml
npp.8.6.3.portable.x64/themes/Vibrant Ink.xml
.xml
npp.8.6.3.portable.x64/themes/Zenburn.xml
.xml
npp.8.6.3.portable.x64/themes/khaki.xml
.xml
npp.8.6.3.portable.x64/themes/vim Dark Blue.xml
.xml
npp.8.6.3.portable.x64/toolbarIcons.xml
.xml
npp.8.6.3.portable.x64/updater/GUP.exe
.exe windows:6 windows x64 arch:x64

2b01d1e6f097308c51e2174a892534f3

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

13/05/2022, 00:00

Not After

14/05/2025, 23:59

Subject

CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

54:07:78:71:f3:73:eb:4d:ad:52:d7:c6:6d:ff:5b:6b:aa:34:0c:33:78:7e:7d:f3:e4:44:44:de:49:a1:cb:c9
Signer

Actual PE Digest

54:07:78:71:f3:73:eb:4d:ad:52:d7:c6:6d:ff:5b:6b:aa:34:0c:33:78:7e:7d:f3:e4:44:44:de:49:a1:cb:c9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

libcurl

curl_easy_setopt
curl_easy_cleanup
curl_easy_init
curl_easy_perform

comctl32

InitCommonControlsEx

shlwapi

PathFileExistsA
PathFindExtensionW
PathIsDirectoryW
PathFileExistsW
PathFindFileNameW
PathRemoveFileSpecW

kernel32

HeapReAlloc
CreateFileW
HeapSize
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
CreateDirectoryW
lstrlenW
GetCurrentThreadId
Sleep
OutputDebugStringW
DeleteFileW
CreateThread
lstrcpyW
lstrcmpW
MulDiv
MoveFileW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ReleaseSemaphore
InitializeCriticalSection
SetEndOfFile
CreateEventW
GetLastError
SetEvent
CloseHandle
ResetEvent
CreateSemaphoreW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetConsoleOutputCP
FlushFileBuffers
GetFileSizeEx
HeapAlloc
HeapFree
GetFileType
WaitForSingleObject
ReadConsoleW
GetConsoleMode
SetFilePointerEx
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
GetModuleHandleW
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
MultiByteToWideChar
WideCharToMultiByte
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
GetExitCodeThread
WriteConsoleW
InitializeCriticalSectionEx
EncodePointer
DecodePointer
GetLocaleInfoEx
LCMapStringEx
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetStringTypeW
CompareStringEx
GetCPInfo
RtlUnwindEx
RtlPcToFileHeader
RaiseException
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
RtlUnwind
ReadFile
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
GetStdHandle
WriteFile

user32

CallNextHookEx
EndDialog
SetWindowTextW
SetDlgItemTextW
CreateWindowExW
MessageBoxA
UnhookWindowsHookEx
SetWindowsHookExW
GetDlgItemInt
SystemParametersInfoW
SetDlgItemInt
DialogBoxParamW
LoadImageW
ReleaseDC
MessageBoxW
SendMessageW
SetWindowPos
GetDC
GetWindowRect
FindWindowExW
GetDlgItemTextW

gdi32

GetDeviceCaps

shell32

SHGetFolderPathW
ShellExecuteW
SHFileOperationW

Sections

.text
Size: 613KB - Virtual size: 613KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
npp.8.6.3.portable.x64/updater/LICENSE
npp.8.6.3.portable.x64/updater/README.md
npp.8.6.3.portable.x64/updater/gup.xml
.xml
npp.8.6.3.portable.x64/updater/libcurl.dll
.dll windows:6 windows x64 arch:x64

6ef556d2b31956dae3aa7d51b8168879

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

13/05/2022, 00:00

Not After

14/05/2025, 23:59

Subject

CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b9:d6:7d:27:e9:65:3f:14:4b:d4:6f:80:bb:de:06:65:34:6c:56:98:39:a4:aa:9c:6b:c6:56:73:fc:1d:31:a5
Signer

Actual PE Digest

b9:d6:7d:27:e9:65:3f:14:4b:d4:6f:80:bb:de:06:65:34:6c:56:98:39:a4:aa:9c:6b:c6:56:73:fc:1d:31:a5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

ws2_32

send
WSAGetLastError
bind
sendto
recvfrom
WSACleanup
WSAStartup
select
__WSAFDIsSet
htonl
ioctlsocket
WSAWaitForMultipleEvents
WSASetEvent
WSAResetEvent
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
listen
accept
gethostname
freeaddrinfo
getaddrinfo
WSAIoctl
WSASetLastError
socket
setsockopt
recv
ntohs
htons
getsockopt
getsockname
getpeername
connect
closesocket

wldap32

ord46
ord217
ord211
ord301
ord200
ord30
ord79
ord35
ord33
ord32
ord27
ord26
ord22
ord41
ord50
ord45
ord60
ord143

advapi32

CryptAcquireContextA
CryptDestroyKey
CryptImportKey
CryptEncrypt
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptReleaseContext

crypt32

CertFreeCertificateContext
CryptDecodeObjectEx
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
CryptStringToBinaryA
PFXImportCertStore
CertAddCertificateContextToStore
CertFindExtension
CertGetNameStringA
CryptQueryObject
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFindCertificateInStore
CertFreeCertificateChain

normaliz

IdnToUnicode
IdnToAscii

bcrypt

BCryptGenRandom

kernel32

GetFileAttributesExW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetStdHandle
HeapAlloc
HeapFree
GetConsoleOutputCP
WriteFile
ReadConsoleW
GetConsoleMode
GetModuleFileNameW
ExitProcess
SetFilePointerEx
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
SetEndOfFile
GetCurrentDirectoryW
GetFullPathNameW
HeapReAlloc
FlushFileBuffers
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
DeleteFileW
GetStringTypeW
GetTimeZoneInformation
HeapSize
WriteConsoleW
SetLastError
CreateThread
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetFileInformationByHandle
GetDriveTypeW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
SleepEx
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
GetProcAddress
CloseHandle
WaitForSingleObjectEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
GetEnvironmentVariableA
Sleep
MoveFileExA
GetCurrentProcessId
GetLastError
FormatMessageW
QueryPerformanceFrequency
GetSystemDirectoryA
GetModuleHandleA
LoadLibraryA
GetStdHandle
GetFileType
ReadFile
PeekNamedPipe
WaitForMultipleObjects
QueryPerformanceCounter
GetTickCount
VerSetConditionMask
VerifyVersionInfoW
CreateFileA
GetFileSizeEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
CreateFileW
RtlUnwindEx
InterlockedFlushSList
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
RtlUnwind

Exports

Exports

curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_header
curl_easy_init
curl_easy_nextheader
curl_easy_option_by_id
curl_easy_option_by_name
curl_easy_option_next
curl_easy_pause
curl_easy_perform
curl_easy_recv
curl_easy_reset
curl_easy_send
curl_easy_setopt
curl_easy_strerror
curl_easy_unescape
curl_easy_upkeep
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_global_sslset
curl_global_trace
curl_maprintf
curl_mfprintf
curl_mime_addpart
curl_mime_data
curl_mime_data_cb
curl_mime_encoder
curl_mime_filedata
curl_mime_filename
curl_mime_free
curl_mime_headers
curl_mime_init
curl_mime_name
curl_mime_subparts
curl_mime_type
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_get_handles
curl_multi_info_read
curl_multi_init
curl_multi_perform
curl_multi_poll
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_action
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_multi_wait
curl_multi_wakeup
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_pushheader_byname
curl_pushheader_bynum
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape
curl_url
curl_url_cleanup
curl_url_dup
curl_url_get
curl_url_set
curl_url_strerror
curl_version
curl_version_info
curl_ws_meta
curl_ws_recv
curl_ws_send

Sections

.text
Size: 531KB - Virtual size: 530KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
npp.8.6.3.portable.x64/updater/updater.ico
npp.8.6.3.portable.x64/userDefineLangs/markdown._preinstalled.udl.xml
npp.8.6.3.portable.x64/userDefineLangs/markdown._preinstalled_DM.udl.xml

Resubmissions

Sharing

General

Malware Config

Signatures

Files

f8f4a11ba928ad759ccd74a6aa21fdd9

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4eCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

97:a7:67:ff:8e:0f:fb:d1:8e:09:8e:0e:82:2d:70:15:74:ce:c7:fb:90:f5:17:cd:87:37:40:7b:f4:b1:bc:48Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

gdiplus

shlwapi

comctl32

version

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 391KB - Virtual size: 390KB

.rdata Size: 124KB - Virtual size: 123KB

.data Size: 5KB - Virtual size: 17KB

.pdata Size: 16KB - Virtual size: 16KB

.detourc Size: 9KB - Virtual size: 8KB

.detourd Size: 512B - Virtual size: 24B

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 2.1MB - Virtual size: 2.1MB

.reloc Size: 3KB - Virtual size: 3KB

d3598d8c3bcea975aea92cd5bbe9edc5

Code Sign

33:00:00:02:cc:8e:b5:96:a6:bd:d1:c9:4e:00:00:00:00:02:ccCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

49:f1:16:24:cf:20:c1:47:1d:d2:f3:36:20:37:1d:a6:81:75:06:cc:36:b9:37:56:b9:e3:40:02:39:1a:44:91Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

netapi32

rpcrt4

version

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

activeds

wldap32

Sections

.text Size: 390KB - Virtual size: 389KB

.rdata Size: 130KB - Virtual size: 130KB

.data Size: 53KB - Virtual size: 60KB

.pdata Size: 17KB - Virtual size: 16KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 41KB - Virtual size: 40KB

.reloc Size: 3KB - Virtual size: 2KB

c5eadffc22c44b9639010ac1e5d281fc

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4aCertificate

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

97:a7:67:ff:8e:0f:fb:d1:8e:09:8e:0e:82:2d:70:15:74:ce:c7:fb:90:f5:17:cd:87:37:40:7b:f4:b1:bc:48
Signer

.text
Size: 391KB - Virtual size: 390KB

.rdata
Size: 124KB - Virtual size: 123KB

.data
Size: 5KB - Virtual size: 17KB

.pdata
Size: 16KB - Virtual size: 16KB

.detourc
Size: 9KB - Virtual size: 8KB

.detourd
Size: 512B - Virtual size: 24B

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 2.1MB - Virtual size: 2.1MB

.reloc
Size: 3KB - Virtual size: 3KB

33:00:00:02:cc:8e:b5:96:a6:bd:d1:c9:4e:00:00:00:00:02:cc
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

49:f1:16:24:cf:20:c1:47:1d:d2:f3:36:20:37:1d:a6:81:75:06:cc:36:b9:37:56:b9:e3:40:02:39:1a:44:91
Signer

.text
Size: 390KB - Virtual size: 389KB

.rdata
Size: 130KB - Virtual size: 130KB

.data
Size: 53KB - Virtual size: 60KB

.pdata
Size: 17KB - Virtual size: 16KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 41KB - Virtual size: 40KB

.reloc
Size: 3KB - Virtual size: 2KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

ce:5f:ef:48:b8:c6:19:f5:3e:b3:36:98:72:c6:f3:9a:6e:a3:1e:29:3b:25:d2:3c:6f:ae:23:88:f8:97:74:54
Signer

.text
Size: 4.3MB - Virtual size: 4.3MB

.rdata
Size: 1005KB - Virtual size: 1004KB

.data
Size: 68KB - Virtual size: 151KB

.pdata
Size: 119KB - Virtual size: 118KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 21KB - Virtual size: 21KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

a0:48:95:57:f8:07:90:8d:40:93:77:75:93:51:ef:a6:aa:3a:cf:87:3e:8a:77:05:5e:4c:a3:58:2e:d9:81:ed
Signer

.text
Size: 54KB - Virtual size: 54KB