home

npp.6.9.installer.exe

Notepad++

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from www.ranchsendgift.com and multiple other hosts.
Publisher:
Notepad++  (signed and verified)

MD5:
39fe82567016b3c890ed856b5791b60f

SHA-1:
99d3507a8eab110b7471bf2a8e63e88ecfb4e831

SHA-256:
3a717d78cd5bd71948f3f81807fc4d96e81f1ab459ddcea7a895374bbede6423

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/26/2024 11:43:47 PM UTC  (a few moments ago)

File size:
4 MB (4,204,144 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\npp.6.9.installer.exe

Digital Signature
Signed by:
Notepad++

Authority:
DigiCert Inc

Valid from:
1/25/2016 7:00:00 AM

Valid to:
1/29/2019 7:00:00 PM

Subject:
CN="Notepad++", O="Notepad++", L=Saint Cloud, S=Ile-de-France, C=FR

Issuer:
CN=DigiCert SHA2 High Assurance Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
055F937A9DF73DFD90BA9889E4C50A11

File PE Metadata
Compilation timestamp:
2/25/2012 2:20:04 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:yvLXNNxuXHo2NaCYjKUiyRaWryWBedXCn2/PQnW4VmcpfUbUy:yz1uXItiyACedX+2/PQWncRUgy

Entry address:
0x38AF

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 90, 40, 00, 55, FF, 15, C0, 92, 40, 00, 6A, 08, A3, 98, EB, 47, 00, E8, 36, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, EA, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, A2, 40, 00, FF, 15, 84, 91, 40, 00, 68, 4C, A2, 40, 00, 68, A0, 6A, 47, 00, E8, 18, 27, 00, 00, FF, 15, B0, 90, 40, 00, 50, BF, A0, F0, 4C, 00, 57, E8, 06, 27, 00, 00...
 
[+]

Entropy:
7.9719

Packer / compiler:
Nullsoft install system v2.x

Code size:
29 KB (29,696 bytes)

The file npp.6.9.installer.exe has been seen being distributed by the following 50 URLs.

http://www.ranchsendgift.com/GeBqNVOTmA_Se9kH1Kc2bOlwR2CQTm9wwFEvExNh9KCmXMbLwG4XE_qUNCVKRJO3pb_uKOZ _5YixcphsjaRm5hwDBJa8R1YdPl3bp54rLrho4G_Xr_93vlyNB757uWateXcZrl lUIIYqlvtVc 3OYuYdWzuZanfEQzFPzh4iYlGcgRQk 8wAaCGQxA9oDF8wjaFU pvqEeRKvcwl3Llks9_kQgAQ==-G0UAAETdFpN7EwzREgUPCqLjv6CwAQcOkQW47rYNG2M4rrto5ojgJDgqFFtPXNeFeI8pj8849iXjsYtsEhkFdXvloQZ9Cg==

http://www.towerbitscenter.com/dnhJUMC82FN2ixPXVxgDdR0k_nvlLinfBg9iZ4hXXOcQHJ8NJiaQ73fwqKQakSWshzBc1GbtSdnVIQax7wS7R63XlwfNpjzL9JzJAYB8emsD4Nf22OaiM10KPIQdDLu rSp_5bxJbJ3nVohUKq1HQyJPqhjKJGCbQQtydg57FO59V_cYl06wEBeyCgpZd2G7JxNvmNOyhT3RICNipis6k7565HG4GQ==-G0UAAETdFpN7EwzREgUPCqLjv6CwAQcOkQW47rYNG2M4rrto5ojgJDgqFFtPXNeFeI8pj8849iXjsYtsEhkFdXvloQZ9Cg==

http://www.ranchsendgift.com/ctkCFN_VoYR59r_uOWlcqWw2rJhnKV XzyKcO7hrBZOMIVU0Coxp02ww6F2moZWDuPGk8DESxf4hc7DnCsGyGpI8VAl91zA7jdsC7Fr8Bed6FfnKQ0O0z_vWIGj3D85MXyklffPc3BB6tDSGfvB8HcZsxdm46t1 BA1vrROBC5QphCyJzjUySemPfO_hV4wXYV_TssdTOZZWB1C9iAMGkQjdFyYDwQ==-G0UAAETdFpN7EwzREgUPCqLjv6CwAQcOkQW47rYNG2M4rrto5ojgJDgqFFtPXNeFeI8pj8849iXjsYtsEhkFdXvloQZ9Cg==

http://lb.cdn.m6web.fr/d/c/a/cb6f65ae2b7dd3117f852e9355c0be58/56e91299/soft/.../notepad_6-9_fr_9567.exe

http://lb.cdn.m6web.fr/d/c/a/ae03714994a3066f96b416f20b31ac65/56d0ac6c/soft/.../notepad_6-9_fr_9567.exe

http://i-learn.uitm.edu.my/download/.../npp.6.9.Installer (1).exe

http://www.ranchsendgift.com/qZSawJhdaZy3DQ4pEoK_rqBI4 xH6ZStITeTJTdSrdlG0cZdfoBDQ77RAYkOUesM3zButBE_Hxb4xWCtpusWW01SSj8VGBLJ65UJ0lbEu3T14fM3SR7wB9vcbmKgZhhEknS5FM2A5p6Iiz6 Ff8clbEcxU5aetUXF3IF8OmeH70Ww96SxvHZwhr8kj7mlkYP4rqWBuaNm4OxOSmo1QQTSREpn6WDZw==-G0UAAETdFpN7EwzREgUPCqLjv6CwAQcOkQW47rYNG2M4rrto5ojgJDgqFFtPXNeFeI8pj8849iXjsYtsEhkFdXvloQZ9Cg==

http://fs34.filehippo.com/3133/.../npp.6.9.Installer.exe

http://www.ranchsendgift.com/oMYtZTsAp_RXrsKGzYm5jBTVaP3Bf8fVuBuqQB4pjhho5Qlt7dT9kiR7qEc2_EgoRDlpPjyUKbfcsK1J7NrB3X9T3rBUZxHS8wzGaKmGk8a7FEaVg7_ldK3UchtplMhI79zMLUTbzu6seCQCKuj1HFEX2n SxhzNNvBhSaKWWTgAJHJIWZubJRv9x3UG dD0slZw3ipD4qVct4CQTG6vMAUanlTV3A==-G0UAAETdFpN7EwzREgUPCqLjv6CwAQcOkQW47rYNG2M4rrto5ojgJDgqFFtPXNeFeI8pj8849iXjsYtsEhkFdXvloQZ9Cg==

http://dl.filehorse.com/win/developer-tools/.../Notepad-6.9.exe

http://www.towerbitscenter.com/tNOJ_Hu9IMcBuEbMWB02gDfaMdOBcyHyRkiY LtDUcOA94N0EU2sd5J7MzVHY7Ilxle13NK7csQ9OV1C GERTHb7yWliN8e 1U_rd7z YSYrd2MJpf3RZW1k9QujaeJGeEGFa0lWx_9qAJw_tmsA6Gt3gOXxdeTRkEp ADiUqF2qJu Ewqb0f_u2y8upGZtx8hLF3wQO3euVms_Y0dw0i_8Z5Y3dnw==-G0UAAETdFpN7EwzREgUPCqLjv6CwAQcOkQW47rYNG2M4rrto5ojgJDgqFFtPXNeFeI8pj8849iXjsYtsEhkFdXvloQZ9Cg==

http://www.ranchsendgift.com/pkmr9O4UnaA0B3tE5_81v1dSxOO171Muh0xlWa4L0VdKhKDZNS6ZQ5N NGgT_dtEWeCXSyaDkZeSYVz yG0AfWaa1EJKs0B9WwGKymmt3Fvo3GmbrQGNpz1vR3bvyovZGWE1aJmnlT1xBY51vgMf8E cppDuNmq3wtocgze03zr RL4_e7I_koFvgRpaisDZYHv5C7CDt h7u4_YZb 340PDUcFq3w==-G0UAAETdFpN7EwzREgUPCqLjv6CwAQcOkQW47rYNG2M4rrto5ojgJDgqFFtPXNeFeI8pj8849iXjsYtsEhkFdXvloQZ9Cg==

http://www.tamindir.com/indir/MjAxNi0wOS0xNSAxNDoyNjowMg==/notepad/windows/.../

http://www.ranchsendgift.com/J4FxiaRH2H6vTnaPghDYLqSmdqgA1QD6ueChiy7g3epWuyGUlyRxvJkHlvUgcQjM9JdOJL1OGHIO0msvr3Nykujb ewxBoioQMTNeyS2KRy9R_09UIuYu0e8kb7XJgnXj9Kh_ 5Mx3HyL7Ex3Zj4TcDe9mgY08skzIgOXWFXcSdUIBYBNGBKIdo_6sd_BK3NjxLEQV7ABO5Y_12V7pTix4Nq8Kqa92L4s5lY3IdhPFaj1Nzy3WPc08ik1PTCJzRkAThkoLI_lJZHWjO2rkexBjW5uQUWbZA9PBPQXEZXJ_jjqOhlfcvvB7PbztYFrXaxaJEl3XNjF GxqgnxCdF0rPkzSWSulcHZOBB6jzJBz5bAYx1NdkOJDrVEi6koFB5kqrHIEcNh cqGT7AyZEDKSJFu4s2v4dvJjDIAdFqh6wK6LUEDmubezbA_g513Ymh7gy0CMQtBxGbqR02Yimd4Vxlr_IJNrZr6gRDxhmIE6jGr eGofkOfQ6PaQrpz04OUaxa5geNTTKXco4eb1 _8H7kS6VOEdkqDk4p1hAE3VOUejHlgAoLhVy9X6Y2Mm9H4O v20gZVJNdYsdrAvLXjCJUEUQCo1B6q4xGdDZiha MJtGaHDrI=-G0UAAETdFpN7EwzREgUPCqLjv6CwAQcOkQW47rYNG2M4rrto5ojgJDgqFFtPXNeFeI8pj8849iXjsYtsEhkFdXvloQZ9Cg==-e

http://www.ranchsendgift.com/V412t8pqHflnFkIn0qCQ5riiCjAzdzQxl4SHSuEDaBC cNaLZ4 Qrp8X2WgsJnKK924rVUJcUgHru1HFbBFEoAZtix2jpEYIBKuhKJxZFa2SbHyrxgj 0jOo6Bm8to6_uhvMfSlR1LeMVBeSfl Wnxdei0x_qvvYvrTKJvdteBlLeSuZ_fPEsZbXhmPdDZmRR3uxr7JsJA OxQ nooNmlDZTtdR5w==-G0UAAETdFpN7EwzREgUPCqLjv6CwAQcOkQW47rYNG2M4rrto5ojgJDgqFFtPXNeFeI8pj8849iXjsYtsEhkFdXvloQZ9Cg==

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://www.ranchsendgift.com/RZVdHD1VorFbAbaya0G2n8mJvALMfNaTquxMeOK_cs9ekoOuWTgLwHfLXf_yWeD1 wX1SslEtiJohxThfqhlpJGH2dRI xSAGnqQtN3i5AQ6v2nGvCG7zbLr6JNy8VCSJy2cBgwokVA331Mlq3RbPBH5hvD_yP3ps4HaQBnoPOJSP_LxBbywYC2kUTJ3NlSx7F3U7TT66mIdHpi5IcPWFrs5YXG8Hg==-G0UAAETdFpN7EwzREgUPCqLjv6CwAQcOkQW47rYNG2M4rrto5ojgJDgqFFtPXNeFeI8pj8849iXjsYtsEhkFdXvloQZ9Cg==

http://download.dabang.pk:81/Softwares/.../notepad plus.6.9.Installer.exe

https://docs.google.com/uc?authuser=0&id=0B0C1BIiW9EWIMF9zRGpxb01mc3c&export=download

http://filehippo.com/download/file/.../

http://extension.campusvirtual2015.uva.es/pluginfile.php/290041/mod_folder/content/.../npp.6.9.Installer.exe

http://www.ranchsendgift.com/0tXEyXMeTveZeuiQG9gr8JzeolmFgrK QNOx9hifH_1Kc7c7mmqcBssLV1emzfs_Ts7m1O7X2NGB3wQrJOcLfGSn8P16JzUH1iXZ2rICcDU2VBKBm3eLn6K_NWKLSdG6sU4P7H1O2wQgcs3bW5zV2651fFZGBf221 r4FZxPff49v FJ7j H2f FYOa158ttOGoYso23weVqNw5vtTHK7_OCuxfQaA==-G0UAAETdFpN7EwzREgUPCqLjv6CwAQcOkQW47rYNG2M4rrto5ojgJDgqFFtPXNeFeI8pj8849iXjsYtsEhkFdXvloQZ9Cg==

http://www.ranchsendgift.com/azSDSl6eEAAkeMmOHyYWejTUXLjiu3SwjEOAhmFtLPTYC5mXHCQznz3VGwT5UjvntX0Fw9QqoBQzZSv0RZjwOjZA0l3v1xbt7gzkJvdf1xUX1gNGb944VA3GA7mbSex7GZgO1X2nTBXxr4nel3jRVq_YPh3KzQoRf_ig4zpPIajZtP uq9mkPhUuhA1Cb4yMbnC6nQWtWuKjY5KaBur TfWt90JXHf3Q3aH4u9l2mrjWxNz0a0zshLHsdZRL0tWTahsotKQGiy9XZbBIwgS1ZseKr ADDjOzpZH 6sRH2HjYsMcidal0PO319f0cGq2gsI4jH9RujKgFSs40jyXa7TXufKZvjGiy7n3okNN9Yh9jbblVh lY8FrAig2oWG7bN9bnEJp25CYKhn6gy5_FqwygVyyJvjRmeeX48 V 1TuN RIUubklx2MbJYnmZViXpoJP1mOY7u3oqfeAoSG7w3csb aEX2ZGuNo7FdXwIXsb87D0KXCVYz5TS6fogZJg_QL6F2VEdS2ragOC_re9LF2yN4wntyigx5YbGZPvG3w1 VwdZhbPz39UlJ8jdqKkd2JTJZkJO3k68VBUVmeASHj42pqBky8q344s37vrUP6vIHPqsbQ=-G0UAAETdFpN7EwzREgUPCqLjv6CwAQcOkQW47rYNG2M4rrto5ojgJDgqFFtPXNeFeI8pj8849iXjsYtsEhkFdXvloQZ9Cg==-e

http://www.ranchsendgift.com/lX KLGtPWVkzXcC9FRiFMrxMJTSk7YrwqhfHem4FA9fFcHSRSbUGRrJTz3 GCOl3ZLd93ioppN s_Wr9dCHibl2EiuN3QAzsHEbTgupvz3EAiwaqxKjZVe5RFjK4NUfEFJAYdblUEmDQFZJIGQmdjxCkZvriPRmIqmQaF4eHJxgzFWxCnfQBSMNIkoqB22QWpHZ6_VKJFBLob9_33uGbaqCfdIk bw==-G0UAAETdFpN7EwzREgUPCqLjv6CwAQcOkQW47rYNG2M4rrto5ojgJDgqFFtPXNeFeI8pj8849iXjsYtsEhkFdXvloQZ9Cg==

http://filehippo.com/download/file/.../

http://dl.cdn.chip.de/downloads/.../npp.6.9.Installer.exe

https://s3.amazonaws.com/downloadape/.../npp.6.9.Installer.exe

http://www.filepuma.com/file/1457518753c10774/notepad_6.9/.../0/

&onid=2352&oid=3001-2352_4-10327521&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=developers/editors&topicbrcrm=&pid=14500946&mfgid=6263863&merid=6263863&ctype=dm&cval=NONE&devicetype=desktop&pguid=61300256350ce7df9cbfbdbd&viewguid=bNx6OuDxhzx9Dwf6P8KkGR9Scr27u1BP7Rcb&destUrl=http://files.downloadnow-1.com/s/software/14/50/09/.../npp.6.9.Installer.exe

Latest 30 of 106 download URLs

Scan npp.6.9.installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.