home

npp.6.6.8.installer.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from download.heise.de and multiple other hosts.
MD5:
5d18ce69fa93de4c1fe180bf484ee20d

SHA-1:
f5e937926e7e6ff9694e3ab0b63d422f168d00b6

SHA-256:
24809a80df9201706f351abfdd09bc45ef404bd3f2af98994ab2d571ccc86c53

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/25/2024 4:54:51 PM UTC  (today)

File size:
7.6 MB (7,920,175 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\npp.6.6.8.installer.exe

File PE Metadata
Compilation timestamp:
2/24/2012 9:20:04 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
196608:X6zoYvfYqW0iKue6PQpKJBJGmobdBQ/ZzKUCNuyzbTdMkCMnWMMJ:X+JQO6YpKJPG7yM9t1x/MJ

Entry address:
0x38AF

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 90, 40, 00, 55, FF, 15, C0, 92, 40, 00, 6A, 08, A3, 98, EB, 47, 00, E8, 36, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, EA, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, A2, 40, 00, FF, 15, 84, 91, 40, 00, 68, 4C, A2, 40, 00, 68, A0, 6A, 47, 00, E8, 18, 27, 00, 00, FF, 15, B0, 90, 40, 00, 50, BF, A0, F0, 4C, 00, 57, E8, 06, 27, 00, 00...
 
[+]

Entropy:
7.9898

Packer / compiler:
Nullsoft install system v2.x

Code size:
29 KB (29,696 bytes)

The file npp.6.6.8.installer.exe has been seen being distributed by the following 45 URLs.

http://download.heise.de/software/fc85c5f6025f5029c1aff215b278f04b/53d95faf/.../npp.6.6.8.installer.exe

https://docs.google.com/a/.../uc?authuser=0&id=0BxiGzop9hAzrZXlUakxXd25iMkU&export=download

http://s7215.chomikuj.pl/File.aspx?e=jtuT7seINF3cMx_Ehwstz2LPQnTWtz5OYhUp47GXomOFJnaTzr7qaMTItLn3xQPktuwcVwf3N74JOPUY4p2hkzLuCCn0ZwmpGTMXRHFDKdVd5tQMua1oIls8cl739oFpT-_9AXABwjfN8Fcjjok-yQ&pv=2

http://s7215.chomikuj.pl/File.aspx?e=jtuT7seINF3cMx_Ehwstz2LPQnTWtz5OYhUp47GXomOnnV6q90KjkMjXkT66UECo1wA2arq9kx93mutQ__1g3auh2jSpdaAaHjq-cDMWhGTcCH_fGOzRdZ95EMeE39EoIoW7Qtxfa04BWSyoXpnpYw&pv=2

http://s7215.chomikuj.pl/File.aspx?e=jtuT7seINF3cMx_Ehwstz2LPQnTWtz5OYhUp47GXomOS4I6xWA3SrA9N-lUAwgu54BdrzfoQsJKRF-f3qt4y--qRgPyoI17uyanwFIWZDAn9KAfscFKi8P-0cQtuuXUSJYd9vDhiSgdk2i_u9dbjwg&pv=2

http://s7215.chomikuj.pl/File.aspx?e=jtuT7seINF3cMx_Ehwstz2LPQnTWtz5OYhUp47GXomO0opT8QxGj1apbKg3SnFWSLyJfWCIuK9sa5FQFwzJfXfTsJe0QmVLtydpfH6WoBK4x7Lzfpiv0E6wQ5JPfBp5ueSvQsr2qwvPCOLluD1AyqA&pv=2

http://s7215.chomikuj.pl/File.aspx?e=jtuT7seINF3cMx_Ehwstz2LPQnTWtz5OYhUp47GXomNQMDx2OiyvoE-KXzwUmzQEqOvPogxbxTmfxmEO6Ld69Od8KknXAGWq3uiGN1TMxgyQbycaGf9-favXYP6aClKyLz0FaeT8VsVcmTjx9e9PWA&pv=2

http://s7215.chomikuj.pl/File.aspx?e=jtuT7seINF3cMx_Ehwstz2LPQnTWtz5OYhUp47GXomN9EUZ_pX1zJdRfeJNLERr5CVdoVesMSyyiymk6tSZKh437L33l0c2njh43-yprGnccmCee5vh2qD1cRgy2ks9UmNRXUfXf875DHPk-TRll7w&pv=2

http://content.officialopendownloads.com/?ic_user_id=598

https://notepad-plus-plus.org/repository/6.x/.../npp.6.6.8.Installer.exe

http://www.filehippo.com/download/file/.../

https://learn.kent.edu/bbcswebdav/.../xid-47800225_1?globalNavigation=false

http://notepad-plus-plus.org/repository/6.x/.../npp.6.6.8.Installer.exe

http://goo.gl/dMbyXg

http://filehippo.com/download/file/.../

http://fs34.filehippo.com/4786/.../npp.6.6.8.Installer.exe

http://filehippo.com/download/file/.../

http://fs41.filehippo.com/2008/.../npp.6.6.8.Installer.exe

http://filehippo.com/download/file/.../

http://fs41.filehippo.com/1177/.../npp.6.6.8.Installer.exe

http://filehippo.com/download/file/.../

http://www.filepuma.com/down/1409394340c6319/notepad_6.6.8/.../0/

http://www.filepuma.com/file/1409394340c6319/notepad_6.6.8/.../0/

http://fs40.filehippo.com/2981/.../npp.6.6.8.Installer.exe

http://filehippo.com/download/file/.../

http://dl.cdn.chip.de/downloads/.../npp.6.6.8.Installer.exe

http://www.filepuma.com/down/1408539568c6319/notepad_6.6.8/.../0/

http://www.filepuma.com/file/1408539568c6319/notepad_6.6.8/.../0/

http://www.filepuma.com/down/1407876893c6319/notepad_6.6.8/.../0/

http://www.filepuma.com/file/1407876893c6319/notepad_6.6.8/.../0/

Latest 30 of 45 download URLs

Scan npp.6.6.8.installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.