Gridinsoft Logo

The blondy_unlocker.exe (WinGup for Notepad++) File Analysis

Updated 2 hours ago
Checked by Malware Check
blondy_unlocker.exe

Technical Analysis

File Name blondy_unlocker.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.254.174
Database Version 2026-09-14 16:00:42 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
804,688
File Size (bytes)
2026-09-14
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
bca6478b230b6920fe79b97a3066e835
SHA1
f61e771c53c63f35f5a2b416c260c74d29329adf
SHA256
eaac64c113ebaba1fae924ad1b6239a44c8806bf2b85d8dc11a27ad65a981cc1
SHA512
463f16b737768ac2bb285efc09e69781132e95c234e2eab37eb98be797606e45d1dbb38df3a6ef55144f4f7e1b08a213768e915b7d967b8c90bd03b216a07ff7
ImpHash
0b43764663ba024c8202f35227fe0bff

PE Analysis

Basic Information

▼
Image Base 0x140000000
Entry Point 0x14003fd40
Compilation Time 2024-10-25 01:21:22
Checksum 0x000ca5d0 (Actual: 0x000ca5d0)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
Digital Signature OK
Imports 7 libraries
libcurl, COMCTL32, SHLWAPI, KERNEL32, USER32, GDI32, SHELL32
Exports 0 functions
Resources 6 Resources
Sections 6 Sections

Version Information

▼
Translation 0x0409 0x04b0
CompanyName Don HO [email protected]
FileDescription WinGup for Notepad++
FileVersion 5.31
InternalName gup.exe
LegalCopyright Copyright 2018 by Don HO
OriginalFilename gup.exe
ProductName WinGup for Notepad++
ProductVersion 5.31

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 609,364 bytes 609,792 bytes 6.47 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ CCDB8EAC978B5F7EE75639787FDF17C8
.rdata 0x00096000 137,620 bytes 137,728 bytes 5.19 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 4C7DBFA142EBE25931E06752184498AF
.data 0x000b8000 20,404 bytes 13,312 bytes 3.88 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 92763BFD6B719DCD2177CB424E31135A
.pdata 0x000bd000 23,136 bytes 23,552 bytes 5.84 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 872F2F30D86D4EAD99AD9B44CEDF4F46
.rsrc 0x000c3000 3,816 bytes 4,096 bytes 4.16 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 1843235F910C3A60A5A385133788E1EB
.reloc 0x000c4000 4,532 bytes 4,608 bytes 5.43 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 2CE3925F5F89EA5AC1D717A561657613

Resource Analysis

▼
Total Resources: 6 (3,409 bytes)
Resource Type Count Total Size Percentage
RT_DIALOG 4 1,480 bytes
43.4%
RT_VERSION 1 738 bytes
21.6%
RT_MANIFEST 1 1,191 bytes
34.9%

Certificate Chain Analysis

▼
Certificate Information
Product WinGup for Notepad++
Description WinGup for Notepad++
File Version 5.31
Original Name gup.exe
Signing Date 07:43 PM 03/07/2025 (555 days ago)
Verification Status Signed
Signers Notepad++; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert Timestamp 2024; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Internal Name gup.exe
Copyright Copyright 2018 by Don HO
Certificate Chain Summary
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #1 Primary
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
Notepad++ #2 Chain
Validity Period: 2022-05-13 00:00:00 → 2025-05-14 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 03 AA 64 92 DE 9D 96 A9 0A 4B CA 97 BE AD B4 4A
DigiCert Timestamp 2024 #3 Chain
Validity Period: 2024-09-26 00:00:00 → 2035-11-25 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0B AE 66 BC 5A BA 7F 95 87 C6 F9 E9 04 E3 33 04
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #4 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted Root G4 #5 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. 1
    Weekly Quick Scans: Set a reminder to run a scan every Sunday. Most infections are caught within the first week, so regular checks give you peace of mind.
  2. 2
    Update Everything: Those annoying update popups exist for a reason — they patch security holes. Windows, browsers, Adobe, Java — keep them all current.
  3. 3
    Download Smart: Stick to official websites and app stores. If a "free" version of paid software sounds too good to be true, it probably comes with unwanted extras.
  4. 4
    Think Before You Click: Malware loves email attachments and "urgent" links. Even if an email looks like it's from your bank or a friend, verify suspicious requests through a different channel.
Proactive Protection
This file looks clean right now, but that doesn't mean you should let your guard down. New malware appears daily, and even legit files can be compromised after download. When in doubt, verify the source and check for a digital signature.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Gridinsoft Portal
Signed in via Gridinsoft Portal · View profile
Your Score for

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware