nppe[.]7z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

nppe.7z
Size

5.2MB
MD5

5ac2661f5fc12a4e75a9bcaa4f313050
SHA1

907e447a13e82f8ce61e2ffd806a88b1e1713d0e
SHA256

99f5f8dc6d79886058c849b88120dc27cb80a0fa12f2b2ae4640b4f579ae77bf
SHA512

a3a0038baadd774f8a997b83e404ed26d74d841678a9557ba92f411adfad5831dd942f378f1bb2e58597fadc4d439a590c6a81bc0dbe85740cd8fe66352ca993
SSDEEP

98304:v1aTXMzSKDTK/iDziVaf2t32FEkQwlW99nvsfJAIUbVyieNt:v245KqHwH2FACfuIn3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/npp.8.7.portable/notepad++.exe

Files

nppe.7z
.7z

Password: 123
npp.8.7.portable/autoCompletion/BaanC.xml
.xml
npp.8.7.portable/autoCompletion/actionscript.xml
.xml
npp.8.7.portable/autoCompletion/autoit.xml
.xml
npp.8.7.portable/autoCompletion/batch.xml
.xml
npp.8.7.portable/autoCompletion/c.xml
.xml
npp.8.7.portable/autoCompletion/cmake.xml
.xml
npp.8.7.portable/autoCompletion/cobol.xml
.xml
npp.8.7.portable/autoCompletion/coffee.xml
.xml
npp.8.7.portable/autoCompletion/cpp.xml
.xml
npp.8.7.portable/autoCompletion/cs.xml
.xml
npp.8.7.portable/autoCompletion/css.xml
.xml
npp.8.7.portable/autoCompletion/gdscript.xml
.js .xml polyglot
npp.8.7.portable/autoCompletion/go.xml
npp.8.7.portable/autoCompletion/html.xml
.xml
npp.8.7.portable/autoCompletion/java.xml
.xml
npp.8.7.portable/autoCompletion/javascript.xml
.xml
npp.8.7.portable/autoCompletion/lisp.xml
.xml
npp.8.7.portable/autoCompletion/lua.xml
.xml
npp.8.7.portable/autoCompletion/nsis.xml
.xml
npp.8.7.portable/autoCompletion/perl.xml
.xml
npp.8.7.portable/autoCompletion/php.xml
.xml
npp.8.7.portable/autoCompletion/powershell.xml
.xml
npp.8.7.portable/autoCompletion/python.xml
.xml
npp.8.7.portable/autoCompletion/raku.xml
.xml
npp.8.7.portable/autoCompletion/rc.xml
.xml
npp.8.7.portable/autoCompletion/sql.xml
.xml
npp.8.7.portable/autoCompletion/tex.xml
.xml
npp.8.7.portable/autoCompletion/typescript.xml
.xml
npp.8.7.portable/autoCompletion/vb.xml
.xml
npp.8.7.portable/autoCompletion/vhdl.xml
.xml
npp.8.7.portable/autoCompletion/xml.xml
.xml
npp.8.7.portable/change.log
npp.8.7.portable/config.xml
.xml
npp.8.7.portable/contextMenu.xml
.xml
npp.8.7.portable/functionList/ada.xml
.xml
npp.8.7.portable/functionList/asm.xml
.xml
npp.8.7.portable/functionList/autoit.xml
.xml
npp.8.7.portable/functionList/baanc.xml
.xml
npp.8.7.portable/functionList/bash.xml
.xml
npp.8.7.portable/functionList/batch.xml
.xml
npp.8.7.portable/functionList/c.xml
.xml
npp.8.7.portable/functionList/cobol-free.xml
.xml
npp.8.7.portable/functionList/cobol.xml
.xml
npp.8.7.portable/functionList/cpp.xml
.xml
npp.8.7.portable/functionList/cs.xml
.xml
npp.8.7.portable/functionList/fortran.xml
.xml
npp.8.7.portable/functionList/fortran77.xml
.xml
npp.8.7.portable/functionList/gdscript.xml
.xml
npp.8.7.portable/functionList/haskell.xml
.xml
npp.8.7.portable/functionList/hollywood.xml
.xml
npp.8.7.portable/functionList/ini.xml
.xml
npp.8.7.portable/functionList/inno.xml
.xml
npp.8.7.portable/functionList/java.xml
.xml
npp.8.7.portable/functionList/javascript.js.xml
.xml
npp.8.7.portable/functionList/krl.xml
.xml
npp.8.7.portable/functionList/latex.xml
.xml
npp.8.7.portable/functionList/lua.xml
.xml
npp.8.7.portable/functionList/nppexec.xml
.xml
npp.8.7.portable/functionList/nsis.xml
.xml
npp.8.7.portable/functionList/overrideMap.xml
.xml
npp.8.7.portable/functionList/pascal.xml
.xml
npp.8.7.portable/functionList/perl.xml
.xml
npp.8.7.portable/functionList/php.xml
.xml
npp.8.7.portable/functionList/powershell.xml
.xml
npp.8.7.portable/functionList/python.xml
.xml
npp.8.7.portable/functionList/raku.xml
.xml
npp.8.7.portable/functionList/ruby.xml
.xml
npp.8.7.portable/functionList/rust.xml
.xml
npp.8.7.portable/functionList/sinumerik.xml
.xml
npp.8.7.portable/functionList/sql.xml
.xml
npp.8.7.portable/functionList/tex.xml
.xml
npp.8.7.portable/functionList/toml.xml
.xml
npp.8.7.portable/functionList/typescript.xml
.xml
npp.8.7.portable/functionList/universe_basic.xml
.xml
npp.8.7.portable/functionList/vhdl.xml
.xml
npp.8.7.portable/functionList/xml.xml
.xml
npp.8.7.portable/langs.model.xml
.js .xml polyglot
npp.8.7.portable/license.txt
npp.8.7.portable/localization/abkhazian.xml
.xml
npp.8.7.portable/localization/afrikaans.xml
.xml
npp.8.7.portable/localization/albanian.xml
.xml
npp.8.7.portable/localization/arabic.xml
.xml
npp.8.7.portable/localization/aragonese.xml
.xml
npp.8.7.portable/localization/aranese.xml
.xml
npp.8.7.portable/localization/azerbaijani.xml
.xml
npp.8.7.portable/localization/basque.xml
.xml
npp.8.7.portable/localization/belarusian.xml
.xml
npp.8.7.portable/localization/bengali.xml
.xml
npp.8.7.portable/localization/bosnian.xml
.xml
npp.8.7.portable/localization/brazilian_portuguese.xml
.xml
npp.8.7.portable/localization/breton.xml
.xml
npp.8.7.portable/localization/bulgarian.xml
.xml
npp.8.7.portable/localization/catalan.xml
.xml
npp.8.7.portable/localization/chineseSimplified.xml
.xml
npp.8.7.portable/localization/corsican.xml
.xml
npp.8.7.portable/localization/croatian.xml
.xml
npp.8.7.portable/localization/czech.xml
.xml
npp.8.7.portable/localization/danish.xml
.xml
npp.8.7.portable/localization/dutch.xml
.xml
npp.8.7.portable/localization/english.xml
.xml
npp.8.7.portable/localization/english_customizable.xml
.xml
npp.8.7.portable/localization/esperanto.xml
.xml
npp.8.7.portable/localization/estonian.xml
.xml
npp.8.7.portable/localization/extremaduran.xml
.xml
npp.8.7.portable/localization/farsi.xml
.xml
npp.8.7.portable/localization/finnish.xml
.xml
npp.8.7.portable/localization/french.xml
.xml
npp.8.7.portable/localization/friulian.xml
.xml
npp.8.7.portable/localization/galician.xml
.xml
npp.8.7.portable/localization/georgian.xml
.xml
npp.8.7.portable/localization/german.xml
.xml
npp.8.7.portable/localization/greek.xml
.xml
npp.8.7.portable/localization/gujarati.xml
.xml
npp.8.7.portable/localization/hebrew.xml
.xml
npp.8.7.portable/localization/hindi.xml
.xml
npp.8.7.portable/localization/hongKongCantonese.xml
.xml
npp.8.7.portable/localization/hungarian.xml
.xml
npp.8.7.portable/localization/indonesian.xml
.xml
npp.8.7.portable/localization/irish.xml
.xml
npp.8.7.portable/localization/italian.xml
.xml
npp.8.7.portable/localization/japanese.xml
.xml
npp.8.7.portable/localization/kabyle.xml
.xml
npp.8.7.portable/localization/kannada.xml
.xml
npp.8.7.portable/localization/kazakh.xml
.xml
npp.8.7.portable/localization/korean.xml
.xml
npp.8.7.portable/localization/kurdish.xml
.xml
npp.8.7.portable/localization/kyrgyz.xml
.xml
npp.8.7.portable/localization/latvian.xml
.xml
npp.8.7.portable/localization/ligurian.xml
.xml
npp.8.7.portable/localization/lithuanian.xml
.xml
npp.8.7.portable/localization/luxembourgish.xml
.xml
npp.8.7.portable/localization/macedonian.xml
.xml
npp.8.7.portable/localization/malay.xml
npp.8.7.portable/localization/marathi.xml
.xml
npp.8.7.portable/localization/mongolian.xml
.xml
npp.8.7.portable/localization/nepali.xml
.xml
npp.8.7.portable/localization/norwegian.xml
.xml
npp.8.7.portable/localization/nynorsk.xml
.xml
npp.8.7.portable/localization/occitan.xml
.xml
npp.8.7.portable/localization/piglatin.xml
.xml
npp.8.7.portable/localization/polish.xml
.xml
npp.8.7.portable/localization/portuguese.xml
.xml
npp.8.7.portable/localization/punjabi.xml
.xml
npp.8.7.portable/localization/romanian.xml
.xml
npp.8.7.portable/localization/russian.xml
.xml
npp.8.7.portable/localization/samogitian.xml
.xml
npp.8.7.portable/localization/sardinian.xml
.xml
npp.8.7.portable/localization/serbian.xml
.xml
npp.8.7.portable/localization/serbianCyrillic.xml
.xml
npp.8.7.portable/localization/sinhala.xml
.xml
npp.8.7.portable/localization/slovak.xml
.xml
npp.8.7.portable/localization/slovenian.xml
.xml
npp.8.7.portable/localization/spanish.xml
.xml
npp.8.7.portable/localization/spanish_ar.xml
.xml
npp.8.7.portable/localization/swedish.xml
.xml
npp.8.7.portable/localization/tagalog.xml
.xml
npp.8.7.portable/localization/taiwaneseMandarin.xml
.xml
npp.8.7.portable/localization/tajikCyrillic.xml
.xml
npp.8.7.portable/localization/tamil.xml
.xml
npp.8.7.portable/localization/tatar.xml
.xml
npp.8.7.portable/localization/telugu.xml
.xml
npp.8.7.portable/localization/thai.xml
.xml
npp.8.7.portable/localization/turkish.xml
.xml
npp.8.7.portable/localization/ukrainian.xml
.xml
npp.8.7.portable/localization/urdu.xml
.xml
npp.8.7.portable/localization/uyghur.xml
.xml
npp.8.7.portable/localization/uzbek.xml
.xml
npp.8.7.portable/localization/uzbekCyrillic.xml
.xml
npp.8.7.portable/localization/venetian.xml
.xml
npp.8.7.portable/localization/vietnamese.xml
.xml
npp.8.7.portable/localization/welsh.xml
.xml
npp.8.7.portable/localization/zulu.xml
.xml
npp.8.7.portable/notepad++.exe
.exe windows:6 windows x86 arch:x86

Password: 123

829ae1dd20dd46706c513cb2c4160d5d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_GetIconSize
ImageList_Draw
ImageList_EndDrag
ImageList_DragShowNolock
ImageList_DragEnter
ImageList_DragMove
ImageList_BeginDrag
ImageList_Remove
ord17
ImageList_SetIconSize
ImageList_AddMasked
InitCommonControlsEx
ImageList_GetIcon
ImageList_Destroy
ImageList_Create
ImageList_ReplaceIcon
_TrackMouseEvent
ord381
ord412
ord411
ord410
ImageList_GetImageInfo
ord413

shlwapi

ColorHLSToRGB
PathStripPathW
PathAddExtensionW
PathFindFileNameW
ColorAdjustLuma
PathAppendW
ColorRGBToHLS
PathRemoveExtensionW
PathIsDirectoryW
PathCombineW
PathIsRelativeW
AssocQueryStringW
PathCompactPathExW
PathGetDriveNumberW
PathMatchSpecW
PathFindExtensionW
PathRemoveFileSpecW

shell32

SHFileOperationW
SHCreateItemFromParsingName
Shell_NotifyIconW
SHGetFolderPathW
ord165
ShellExecuteW
DragFinish
DragQueryPoint
DragQueryFileW

dbghelp

ImageNtHeader

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

crypt32

CertNameToStrW
CertGetCertificateContextProperty
CertGetNameStringW
CertFindCertificateInStore
CryptMsgGetParam
CertCloseStore
CryptQueryObject
CryptMsgClose

wintrust

WinVerifyTrust

sensapi

IsNetworkAlive
IsDestinationReachableW

wininet

InternetCrackUrlW

uxtheme

GetThemeFont
GetThemeBackgroundContentRect
EndBufferedAnimation
SetWindowTheme
GetThemeTransitionDuration
DrawThemeParentBackground
CloseThemeData
GetThemePartSize
DrawThemeBackground
OpenThemeData
EnableThemeDialogTexture
DrawThemeTextEx
BufferedPaintStopAllAnimations
BeginBufferedAnimation
BufferedPaintRenderAnimation

dwmapi

DwmSetWindowAttribute

kernel32

GlobalUnlock
WriteFile
GetTimeFormatEx
CreateFileW
GetDateFormatEx
FormatMessageW
GlobalAlloc
CloseHandle
GetLocalTime
GetCurrentDirectoryW
SetFilePointerEx
FlushFileBuffers
GetFinalPathNameByHandleW
SetFileTime
FindFirstStreamW
FormatMessageA
lstrcpynW
ExpandEnvironmentStringsW
SetCurrentDirectoryW
SizeofResource
LockResource
LoadResource
FindResourceW
FreeLibrary
WaitForSingleObject
CreateEventW
SetEvent
CreateThread
ResetEvent
CopyFileW
GetCurrentProcess
GetCurrentProcessId
CreateMutexW
ReleaseMutex
Sleep
GetApplicationRestartSettings
UnregisterApplicationRestart
lstrcmpiA
RegisterApplicationRestart
GlobalSize
SetFileAttributesW
CopyFileExW
GetVersionExW
GetSystemInfo
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
VerSetConditionMask
VerifyVersionInfoW
lstrcpynA
SetLastError
GetTempPathW
CancelIo
WaitForSingleObjectEx
GetDateFormatW
SleepEx
ReadDirectoryChangesW
GetLocaleInfoA
LCMapStringW
GetTickCount
GetStringTypeExW
LCMapStringA
GetStringTypeExA
GetUserDefaultLCID
LoadLibraryA
WriteConsoleW
GetSystemTimeAsFileTime
LCMapStringEx
GetLocaleInfoEx
DecodePointer
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetNativeSystemInfo
SleepConditionVariableSRW
WakeAllConditionVariable
GetModuleHandleExW
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
IsProcessorFeaturePresent
RaiseException
InitOnceBeginInitialize
InitOnceComplete
QueryPerformanceFrequency
QueryPerformanceCounter
GetStringTypeW
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GlobalLock
SystemTimeToTzSpecificLocalTime
lstrcpyW
ReplaceFileW
MoveFileExW
GetTimeFormatW
DeleteFileW
GetDiskFreeSpaceExW
FileTimeToSystemTime
QueueUserAPC
SetEndOfFile
HeapSize
GetLongPathNameW
GetFullPathNameW
CompareFileTime
CreateDirectoryW
GetFileAttributesW
FindClose
lstrlenW
FindNextFileW
FindFirstFileW
WideCharToMultiByte
MultiByteToWideChar
GlobalFree
GetVersion
GetACP
GetModuleFileNameW
MulDiv
lstrcmpW
GetCurrentThreadId
LocalFree
GetLastError
LocalAlloc
LoadLibraryExW
lstrcmpiW
GetModuleHandleW
GetFileAttributesExW
GetProcAddress
VirtualProtect
CompareStringEx
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
RtlUnwind
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ReadFile
ExitProcess
ExitThread
FreeLibraryAndExitThread
GetStdHandle
HeapAlloc
HeapFree
GetFileType
GetConsoleMode
SetStdHandle
ReadConsoleW
CompareStringW
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesW
GetTimeZoneInformation
GetFileSizeEx
GetConsoleOutputCP
IsValidCodePage
GetOEMCP
HeapReAlloc
FindFirstFileExW
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
WaitForMultipleObjects

user32

CharLowerW
CharUpperW
IsCharLowerW
CreateAcceleratorTableW
ShowCursor
CreateDialogIndirectParamW
MonitorFromRect
SetRectEmpty
GetCapture
LoadBitmapW
RegisterWindowMessageW
ScrollWindow
RemovePropW
GetPropW
InsertMenuItemW
KillTimer
GetCaretBlinkTime
AppendMenuA
GetMessageTime
GetKeyboardLayout
ValidateRect
SetTimer
DestroyCursor
MsgWaitForMultipleObjects
NotifyWinEvent
GetUpdateRgn
SystemParametersInfoA
GetDoubleClickTime
DrawTextA
MonitorFromPoint
AdjustWindowRectEx
LoadStringW
LoadStringA
IsCharAlphaNumericW
GetDesktopWindow
GetDCEx
GetDlgItemTextA
SetScrollInfo
GetScrollInfo
GetWindowTextLengthW
GetMessageW
DeferWindowPos
UnregisterClassW
RegisterClassExW
TrackPopupMenu
BeginDeferWindowPos
DispatchMessageW
MessageBoxA
TranslateMessage
LoadIconW
EndDeferWindowPos
FlashWindowEx
PostQuitMessage
BringWindowToTop
SetCapture
ReleaseCapture
GetActiveWindow
RedrawWindow
IsChild
SetParent
GetSysColorBrush
GetKeyState
FindWindowExW
CallNextHookEx
SetWindowsHookExW
GetMenuState
GetMenuItemCount
CreatePopupMenu
SetMenuItemInfoW
DestroyMenu
InsertMenuW
TrackPopupMenuEx
CheckMenuItem
EnableMenuItem
CreateMenu
IsWindow
EmptyClipboard
SetClipboardData
GetDlgItemInt
SetDlgItemInt
CreateDialogParamW
IsWindowVisible
ShowWindow
ClientToScreen
RegisterClipboardFormatW
SetClipboardViewer
MessageBoxW
IsCharAlphaW
ChangeClipboardChain
CloseClipboard
GetClipboardData
IsClipboardFormatAvailable
ShowScrollBar
PostMessageW
GetMenu
DestroyWindow
HideCaret
CreateWindowExW
MessageBeep
GetScrollPos
GetWindowPlacement
GetKeyboardState
SetCaretPos
GetScrollRange
CreateCaret
RegisterClassW
SetWindowPlacement
DrawTextExW
LoadCursorW
DestroyCaret
SetCursor
SetScrollRange
ShowCaret
SetScrollPos
DrawEdge
UpdateWindow
DrawFrameControl
ToAscii
MoveWindow
EndDialog
DestroyIcon
DialogBoxIndirectParamW
SetLayeredWindowAttributes
FindWindowW
GetLastActivePopup
LoadMenuW
GetClassNameA
GetWindowTextA
IsDialogMessageW
SetMenu
CheckMenuRadioItem
MonitorFromWindow
DeleteMenu
SetMenuItemBitmaps
SetFocus
DrawIconEx
ChildWindowFromPointEx
DialogBoxParamW
EnableWindow
GetDC
LoadImageW
GetMenuItemInfoW
DefWindowProcW
GetWindowRect
GetFocus
InflateRect
SetWindowPos
EnumChildWindows
FillRect
ScreenToClient
GetSystemMetrics
GetMenuBarInfo
OffsetRect
MapWindowPoints
TrackMouseEvent
FrameRect
DrawFocusRect
GetSysColor
IsWindowEnabled
IntersectRect
GetClassNameW
GetWindowDC
EnumThreadWindows
GetComboBoxInfo
GetClientRect
DrawTextW
GetParent
PtInRect
InvalidateRect
ChildWindowFromPoint
ReleaseDC
GetCursorPos
BeginPaint
EndPaint
GetWindowTextW
GetWindowLongW
CallWindowProcW
SendMessageW
SetWindowTextW
GetDlgCtrlID
SetDlgItemTextW
GetDlgItemTextW
SendDlgItemMessageW
SetDlgItemTextA
SetWindowLongW
GetDlgItem
wsprintfW
SetPropW
SystemParametersInfoW
GetAncestor
GetMonitorInfoW
DestroyAcceleratorTable
TranslateAcceleratorW
DrawMenuBar
IsZoomed
AppendMenuW
SetForegroundWindow
IsIconic
ModifyMenuW
GetMenuItemID
GetSubMenu
GetMenuStringW
RemoveMenu
GetIconInfo
CreateIconIndirect
WindowFromPoint
LockWindowUpdate
OpenClipboard
mouse_event
UnhookWindowsHookEx

gdi32

OffsetWindowOrgEx
LineTo
RestoreDC
MoveToEx
CreateHatchBrush
CreateFontW
GetTextMetricsW
Rectangle
SetROP2
GetROP2
GetPixel
SetWindowOrgEx
CreateBitmap
CreatePatternBrush
PatBlt
SetBrushOrgEx
SetDIBits
GetDIBits
EnumFontFamiliesExW
EndPage
DPtoLP
StartDocW
ExtTextOutW
BitBlt
EndDoc
StartPage
RectVisible
GetTextExtentPointW
CombineRgn
Ellipse
Polygon
ExtCreatePen
GetTextExtentExPointA
GdiAlphaBlend
GetTextExtentExPointW
GetTextExtentPoint32A
CreateDIBSection
ExtTextOutA
CreateCompatibleBitmap
SaveDC
CreateCompatibleDC
IntersectClipRect
GetDeviceCaps
GetObjectW
SelectObject
GetClipRgn
GetStockObject
CreateRectRgnIndirect
Polyline
CreateRectRgn
GetTextExtentPoint32W
SetTextColor
SetBkMode
CreatePen
SelectClipRgn
ExcludeClipRect
SetBkColor
CreateSolidBrush
CreateFontIndirectW
RoundRect
SetTextAlign
DeleteDC
DeleteObject

comdlg32

PrintDlgW
ChooseColorW

advapi32

CryptReleaseContext
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptAcquireContextW
RegGetValueW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
CheckTokenMembership
FreeSid
AllocateAndInitializeSid
RegDeleteValueW
RegSetValueExW
RegEnumKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegQueryInfoKeyW
IsTextUnicode

ole32

RevokeDragDrop
RegisterDragDrop
OleInitialize
DoDragDrop
OleUninitialize
ReleaseStgMedium
CoUninitialize
CoInitialize
CoTaskMemFree
CoCreateInstance
CLSIDFromProgID

oleaut32

SysFreeString
SysAllocStringLen

imm32

ImmSetCandidateWindow
ImmSetCompositionStringW
ImmEscapeW
ImmGetCompositionStringW
ImmSetCompositionWindow
ImmSetCompositionFontW
ImmReleaseContext
ImmGetContext
ImmNotifyIME

Exports

Exports

_CreateLexer@4
_GetLexerCount@0
_GetLexerFactory@4
_GetLexerName@12
_GetLibraryPropertyNames@0
_GetNameSpace@0
_LexerNameFromID@4
_SetLibraryProperty@8

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 824KB - Virtual size: 824KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
npp.8.7.portable/plugins/Config/nppPluginList.dll
.dll windows:6 windows x86 arch:x86

Password: 123

377588a8d238fe268c587684e21fc1fc

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

13/05/2022, 00:00

Not After

14/05/2025, 23:59

Subject

CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9c:ea:c7:63:db:dd:e0:c8:90:8c:f0:f3:cb:e7:55:5e:d6:d4:5c:20:56:62:0d:4e:3a:d7:f8:1f:e4:60:1d:7f
Signer

Actual PE Digest

9c:ea:c7:63:db:dd:e0:c8:90:8c:f0:f3:cb:e7:55:5e:d6:d4:5c:20:56:62:0d:4e:3a:d7:f8:1f:e4:60:1d:7f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\sources\nppPluginList\bin\nppPluginList.pdb

Imports

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
WriteConsoleW
DecodePointer

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
npp.8.7.portable/plugins/NppConverter/NppConverter.dll
.dll windows:6 windows x86 arch:x86

Password: 123

e317478d4b875e3c3e77c178355aab49

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

13/05/2022, 00:00

Not After

14/05/2025, 23:59

Subject

CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

98:10:90:1a:bc:72:78:bf:00:e3:3c:55:d5:ea:a6:b5:fb:d6:7a:8a:6f:f0:b2:a2:54:00:1b:37:2c:4f:55:87
Signer

Actual PE Digest

98:10:90:1a:bc:72:78:bf:00:e3:3c:55:d5:ea:a6:b5:fb:d6:7a:8a:6f:f0:b2:a2:54:00:1b:37:2c:4f:55:87

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathFindFileNameW
PathFileExistsW

kernel32

InterlockedFlushSList
DecodePointer
SetEndOfFile
lstrlenW
GlobalAlloc
GlobalLock
GlobalUnlock
SizeofResource
GetLastError
LockResource
GlobalFree
LoadResource
FindResourceW
GetPrivateProfileIntW
GetModuleFileNameW
GetPrivateProfileSectionNamesW
lstrcpyW
WriteConsoleW
HeapReAlloc
HeapSize
CreateFileW
ReadConsoleW
ReadFile
SetStdHandle
GetStringTypeW
GetProcessHeap
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
RaiseException
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
CloseHandle
GetFileSizeEx
SetFilePointerEx
FindClose
FindFirstFileExW
FindNextFileW

user32

ShowWindow
MoveWindow
SetFocus
GetDlgItem
UpdateWindow
InvalidateRect
GetWindowTextW
GetWindowLongW
CreateDialogParamW
GetWindowRect
IsWindowVisible
MessageBoxA
SetWindowLongW
GetClientRect
CreateDialogIndirectParamW
RegisterClipboardFormatW
SendMessageW
OpenClipboard
CloseClipboard
EmptyClipboard
SendDlgItemMessageW
SendDlgItemMessageA
SetClipboardData
DestroyWindow
MessageBoxW

Exports

Exports

beNotified
getFuncsArray
getName
isUnicode
messageProc
setInfo

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
npp.8.7.portable/plugins/NppExport/NppExport.dll
.dll windows:6 windows x86 arch:x86

Password: 123

55b0bcfb803656a699462c0357949da2

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

13/05/2022, 00:00

Not After

14/05/2025, 23:59

Subject

CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

43:98:c6:c9:55:d4:c9:1d:08:08:e0:62:5e:b1:b2:76:d0:d4:34:3e:5f:f4:85:1d:f9:96:91:b8:14:99:3e:ba
Signer

Actual PE Digest

43:98:c6:c9:55:d4:c9:1d:08:08:e0:62:5e:b1:b2:76:d0:d4:34:3e:5f:f4:85:1d:f9:96:91:b8:14:99:3e:ba

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameW
MulDiv
lstrcpynW
lstrcpyW
lstrcatW
MultiByteToWideChar
DecodePointer
CloseHandle
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
SetStdHandle
GetStringTypeW
WriteFile
CreateFileW
lstrcmpiA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
SetFilePointerEx
GetProcessHeap
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RaiseException
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
WriteConsoleW

user32

GetDC
EmptyClipboard
ReleaseDC
CloseClipboard
OpenClipboard
SendMessageW
MessageBoxW
RegisterClipboardFormatW
SetClipboardData

gdi32

GetTextExtentPoint32W
GetDeviceCaps
DeleteObject
CreateFontW
SelectObject

comdlg32

GetSaveFileNameW

shlwapi

PathFindFileNameW
PathRemoveExtensionW
PathRemoveFileSpecW

Exports

Exports

beNotified
getFuncsArray
getName
isUnicode
messageProc
setInfo

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
npp.8.7.portable/plugins/mimeTools/mimeTools.dll
.dll windows:6 windows x86 arch:x86

Password: 123

514a9d4a0e1de88e55641df75053e132

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

13/05/2022, 00:00

Not After

14/05/2025, 23:59

Subject

CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e3:27:b5:52:41:9d:13:db:61:d7:46:ac:c4:01:1f:10:92:3d:fa:aa:4e:52:f1:e6:78:ea:06:d0:fa:bb:c5:3d
Signer

Actual PE Digest

e3:27:b5:52:41:9d:13:db:61:d7:46:ac:c4:01:1f:10:92:3d:fa:aa:4e:52:f1:e6:78:ea:06:d0:fa:bb:c5:3d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyW
WriteConsoleW
CloseHandle
CreateFileW
SetFilePointerEx
GetConsoleMode
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
DecodePointer

user32

GetClientRect
ClientToScreen
CreateDialogParamW
SetWindowPos
SendMessageW
EndDialog
MessageBoxW

Exports

Exports

beNotified
getFuncsArray
getName
isUnicode
messageProc
setInfo

Sections

.text
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
npp.8.7.portable/readme.txt
npp.8.7.portable/shortcuts.xml
.xml
npp.8.7.portable/stylers.model.xml
.xml
npp.8.7.portable/tabContextMenu_example.xml
.xml
npp.8.7.portable/themes/Bespin.xml
.xml
npp.8.7.portable/themes/Black board.xml
.xml
npp.8.7.portable/themes/Choco.xml
.xml
npp.8.7.portable/themes/DansLeRuSH-Dark.xml
.xml
npp.8.7.portable/themes/DarkModeDefault.xml
.xml
npp.8.7.portable/themes/Deep Black.xml
.xml
npp.8.7.portable/themes/Hello Kitty.xml
.xml
npp.8.7.portable/themes/HotFudgeSundae.xml
.xml
npp.8.7.portable/themes/Mono Industrial.xml
.xml
npp.8.7.portable/themes/Monokai.xml
.xml
npp.8.7.portable/themes/MossyLawn.xml
.xml
npp.8.7.portable/themes/Navajo.xml
.xml
npp.8.7.portable/themes/Obsidian.xml
.xml
npp.8.7.portable/themes/Plastic Code Wrap.xml
.xml
npp.8.7.portable/themes/Ruby Blue.xml
.xml
npp.8.7.portable/themes/Solarized-light.xml
.xml
npp.8.7.portable/themes/Solarized.xml
.xml
npp.8.7.portable/themes/Twilight.xml
.xml
npp.8.7.portable/themes/Vibrant Ink.xml
.xml
npp.8.7.portable/themes/Zenburn.xml
.xml
npp.8.7.portable/themes/khaki.xml
.xml
npp.8.7.portable/themes/vim Dark Blue.xml
.xml
npp.8.7.portable/toolbarIcons.xml
.xml
npp.8.7.portable/updater/GUP.exe
.exe windows:6 windows x86 arch:x86

Password: 123

e82485ff5ec74b13b6a224430febbae6

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

13/05/2022, 00:00

Not After

14/05/2025, 23:59

Subject

CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f6:22:ce:af:c7:96:08:2f:bf:0c:27:d3:ed:87:3a:39:d2:4b:96:66:65:7a:c9:60:a6:20:62:d0:82:ab:29:a9
Signer

Actual PE Digest

f6:22:ce:af:c7:96:08:2f:bf:0c:27:d3:ed:87:3a:39:d2:4b:96:66:65:7a:c9:60:a6:20:62:d0:82:ab:29:a9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

libcurl

curl_easy_cleanup
curl_easy_perform
curl_easy_setopt
curl_easy_init

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameW
PathIsDirectoryW
PathRemoveFileSpecW
PathFindExtensionW
PathFileExistsA
PathFileExistsW

kernel32

HeapReAlloc
CreateFileW
HeapSize
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
CreateDirectoryW
DeleteFileW
OutputDebugStringW
Sleep
CreateThread
GetCurrentThreadId
MulDiv
lstrcmpW
lstrcpyW
lstrlenW
MoveFileW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CloseHandle
GetLastError
SetEndOfFile
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
CreateSemaphoreW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetTimeZoneInformation
GetFileSizeEx
GetConsoleOutputCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapAlloc
ReadConsoleW
GetConsoleMode
InitializeCriticalSection
TryAcquireSRWLockExclusive
SetFilePointerEx
GetFileType
HeapFree
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
WideCharToMultiByte
MultiByteToWideChar
WaitForSingleObjectEx
GetExitCodeThread
WriteConsoleW
WakeConditionVariable
InitializeCriticalSectionEx
GetLocaleInfoEx
EncodePointer
DecodePointer
LCMapStringEx
GetProcAddress
GetStringTypeW
CompareStringEx
GetCPInfo
RaiseException
RtlUnwind
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ReadFile
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
GetStdHandle
WriteFile

user32

MessageBoxA
GetWindowRect
SetWindowTextW
ReleaseDC
FindWindowExW
GetDlgItemTextW
SetDlgItemTextW
GetDlgItemInt
SetDlgItemInt
EndDialog
DialogBoxParamW
SetWindowPos
CreateWindowExW
SendMessageW
SetWindowsHookExW
MessageBoxW
UnhookWindowsHookEx
CallNextHookEx
LoadImageW
SystemParametersInfoW
GetDC

gdi32

GetDeviceCaps

shell32

SHFileOperationW
ShellExecuteW
SHGetFolderPathW

Sections

.text
Size: 481KB - Virtual size: 481KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
npp.8.7.portable/updater/LICENSE
npp.8.7.portable/updater/README.md
npp.8.7.portable/updater/gup.xml
.xml
npp.8.7.portable/updater/libcurl.dll
.dll windows:6 windows x86 arch:x86

Password: 123

effa0c49c40dcf088e6419119e346c4b

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

13/05/2022, 00:00

Not After

14/05/2025, 23:59

Subject

CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c6:73:10:56:55:fc:fe:e9:eb:0d:d7:4d:f1:b8:cc:55:c3:b9:d7:87:fc:01:e0:5e:9f:d9:4d:31:0f:01:ff:89
Signer

Actual PE Digest

c6:73:10:56:55:fc:fe:e9:eb:0d:d7:4d:f1:b8:cc:55:c3:b9:d7:87:fc:01:e0:5e:9f:d9:4d:31:0f:01:ff:89

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

send
WSAGetLastError
bind
sendto
recvfrom
WSACleanup
WSAStartup
select
__WSAFDIsSet
htonl
ioctlsocket
WSAWaitForMultipleEvents
WSASetEvent
WSAResetEvent
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
listen
accept
gethostname
freeaddrinfo
getaddrinfo
WSAIoctl
WSASetLastError
socket
setsockopt
recv
ntohs
htons
getsockopt
getsockname
getpeername
connect
closesocket

wldap32

ord46
ord217
ord211
ord301
ord200
ord30
ord79
ord35
ord33
ord32
ord27
ord26
ord22
ord41
ord50
ord45
ord60
ord143

advapi32

CryptAcquireContextA
CryptDestroyKey
CryptImportKey
CryptEncrypt
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptReleaseContext

crypt32

CertFreeCertificateContext
CryptDecodeObjectEx
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
CryptStringToBinaryA
PFXImportCertStore
CertAddCertificateContextToStore
CertFindExtension
CertGetNameStringA
CryptQueryObject
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFindCertificateInStore
CertFreeCertificateChain

normaliz

IdnToUnicode
IdnToAscii

bcrypt

BCryptGenRandom

kernel32

SetStdHandle
GetFileAttributesExW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapAlloc
SetEndOfFile
GetConsoleOutputCP
WriteFile
ReadConsoleW
GetConsoleMode
GetModuleFileNameW
ExitProcess
SetFilePointerEx
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetCurrentDirectoryW
GetFullPathNameW
HeapReAlloc
FlushFileBuffers
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
DeleteFileW
GetStringTypeW
GetTimeZoneInformation
HeapSize
WriteConsoleW
HeapFree
Sleep
GetFileInformationByHandle
GetDriveTypeW
CreateFileW
RaiseException
EncodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
SleepEx
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
GetProcAddress
CloseHandle
WaitForSingleObjectEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
GetEnvironmentVariableA
DecodePointer
MoveFileExA
GetCurrentProcessId
GetLastError
SetLastError
FormatMessageW
QueryPerformanceFrequency
GetSystemDirectoryA
GetModuleHandleA
LoadLibraryA
GetStdHandle
GetFileType
ReadFile
PeekNamedPipe
WaitForMultipleObjects
QueryPerformanceCounter
GetTickCount
VerSetConditionMask
VerifyVersionInfoW
CreateFileA
GetFileSizeEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
LoadLibraryExW
InterlockedFlushSList
RtlUnwind
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree

Exports

Exports

curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_header
curl_easy_init
curl_easy_nextheader
curl_easy_option_by_id
curl_easy_option_by_name
curl_easy_option_next
curl_easy_pause
curl_easy_perform
curl_easy_recv
curl_easy_reset
curl_easy_send
curl_easy_setopt
curl_easy_strerror
curl_easy_unescape
curl_easy_upkeep
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_global_sslset
curl_global_trace
curl_maprintf
curl_mfprintf
curl_mime_addpart
curl_mime_data
curl_mime_data_cb
curl_mime_encoder
curl_mime_filedata
curl_mime_filename
curl_mime_free
curl_mime_headers
curl_mime_init
curl_mime_name
curl_mime_subparts
curl_mime_type
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_get_handles
curl_multi_info_read
curl_multi_init
curl_multi_perform
curl_multi_poll
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_action
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_multi_wait
curl_multi_wakeup
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_pushheader_byname
curl_pushheader_bynum
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape
curl_url
curl_url_cleanup
curl_url_dup
curl_url_get
curl_url_set
curl_url_strerror
curl_version
curl_version_info
curl_ws_meta
curl_ws_recv
curl_ws_send

Sections

.text
Size: 481KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
npp.8.7.portable/updater/updater.ico
npp.8.7.portable/userDefineLangs/markdown._preinstalled.udl.xml
npp.8.7.portable/userDefineLangs/markdown._preinstalled_DM.udl.xml

Sharing

General

Malware Config

Signatures

Files

Password: 123

Password: 123

829ae1dd20dd46706c513cb2c4160d5d

Headers

File Characteristics

Imports

comctl32

shlwapi

shell32

dbghelp

version

crypt32

wintrust

sensapi

wininet

uxtheme

dwmapi

kernel32

user32

gdi32

comdlg32

advapi32

ole32

oleaut32

imm32

Exports

Exports

Sections

.text Size: 3.7MB - Virtual size: 3.7MB

.rdata Size: 824KB - Virtual size: 824KB

.data Size: 53KB - Virtual size: 68KB

.rsrc Size: 2.5MB - Virtual size: 2.5MB

.reloc Size: 173KB - Virtual size: 173KB

Password: 123

377588a8d238fe268c587684e21fc1fc

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4aCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

9c:ea:c7:63:db:dd:e0:c8:90:8c:f0:f3:cb:e7:55:5e:d6:d4:5c:20:56:62:0d:4e:3a:d7:f8:1f:e4:60:1d:7fSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

Sections

.text Size: 48KB - Virtual size: 47KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 2KB - Virtual size: 4KB

.rsrc Size: 110KB - Virtual size: 110KB

.reloc Size: 4KB - Virtual size: 3KB

Password: 123

e317478d4b875e3c3e77c178355aab49

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4aCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

.text
Size: 3.7MB - Virtual size: 3.7MB

.rdata
Size: 824KB - Virtual size: 824KB

.data
Size: 53KB - Virtual size: 68KB

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

.reloc
Size: 173KB - Virtual size: 173KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

9c:ea:c7:63:db:dd:e0:c8:90:8c:f0:f3:cb:e7:55:5e:d6:d4:5c:20:56:62:0d:4e:3a:d7:f8:1f:e4:60:1d:7f
Signer

.text
Size: 48KB - Virtual size: 47KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 110KB - Virtual size: 110KB

.reloc
Size: 4KB - Virtual size: 3KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

98:10:90:1a:bc:72:78:bf:00:e3:3c:55:d5:ea:a6:b5:fb:d6:7a:8a:6f:f0:b2:a2:54:00:1b:37:2c:4f:55:87
Signer

.text
Size: 100KB - Virtual size: 100KB

.rdata
Size: 32KB - Virtual size: 31KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 5KB - Virtual size: 5KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

43:98:c6:c9:55:d4:c9:1d:08:08:e0:62:5e:b1:b2:76:d0:d4:34:3e:5f:f4:85:1d:f9:96:91:b8:14:99:3e:ba
Signer

.text
Size: 76KB - Virtual size: 76KB

.rdata
Size: 30KB - Virtual size: 30KB

.data
Size: 2KB - Virtual size: 5KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 4KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate