home

npp.6.7.7.installer.exe

This is a setup and installation application. The file has been seen being downloaded from notepad-plus-plus.org.
MD5:
fd54288e8b155c234d787c0d232c65a0

SHA-1:
82265e6cb2c1705df33cda1d34ad449d2d2e61ff

SHA-256:
229369c3e8ac387bfbb3c963bb1a3d0128a822f7f2f0e6fa9fb031a24f9799ff

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/24/2024 4:26:23 AM UTC  (today)

File size:
7.8 MB (8,165,142 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\npp.6.7.7.installer.exe

File PE Metadata
Compilation timestamp:
2/25/2012 3:20:04 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
196608:stiCbKmpBQDQl6v0MQpAzBJRmPbdBQoIei44eZNHouMkClxMRL:s8GuDX8NpAzPRokei+N1qaRL

Entry address:
0x38AF

Entry point:
40, 00, A3, 70, 6A, 47, 00, 83, 7E, 50, FF, BF, 40, 6A, 47, 00, 0F, 84, 95, 00, 00, 00, 8B, 0D, 00, A4, 40, 00, 89, 4C, 24, 10, 8B, 0D, 04, A4, 40, 00, 89, 4C, 24, 14, 8B, 0D, B8, EA, 47, 00, A3, 54, 6A, 47, 00, 8D, 44, 24, 10, 57, C7, 05, 44, 6A, 47, 00, 00, 10, 40, 00, 89, 0D, 50, 6A, 47, 00, A3, 64, 6A, 47, 00, FF, 15, 00, 92, 40, 00, 66, 85, C0, 0F, 84, 1C, 01, 00, 00, 53, 8D, 44, 24, 1C, 50, 53, 6A, 30, FF, 15, FC, 91, 40, 00, 8B, 44, 24, 24, 2B, 44, 24, 1C, 53, FF, 35, B8, EA, 47, 00, 53, 53, 50, 8B...
 
[+]

Entropy:
7.9909  (probably packed)

Code size:
29 KB (29,696 bytes)

The file npp.6.7.7.installer.exe has been seen being distributed by the following URL.

http://notepad-plus-plus.org/repository/6.x/.../npp.6.7.7.Installer.exe

Scan npp.6.7.7.installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.