<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[gup.exe - never seen that process on my pc]]></title><description><![CDATA[<p dir="auto">hello</p>
<p dir="auto">does anyone know if this is legit?</p>
<p dir="auto">notepad++ 8.9.2</p>
<p dir="auto">C:\program files\notepad++\updater\gup.exe</p>
<p dir="auto"><img src="/assets/uploads/files/1771407555997-5d8ec3eb-b7f6-4220-950a-9633baeba41f-image.png" alt="5d8ec3eb-b7f6-4220-950a-9633baeba41f-image.png" class=" img-fluid img-markdown" /></p>
<p dir="auto"><img src="/assets/uploads/files/1771407600493-146e4503-407f-4d8d-a70c-86045c4e988f-image.png" alt="146e4503-407f-4d8d-a70c-86045c4e988f-image.png" class=" img-fluid img-markdown" /></p>
<pre><code>--- PLIK ---


Name          : gup.exe
Length        : 1310848
CreationTime  : 16.02.2026 13:12:14
LastWriteTime : 16.02.2026 13:12:14



--- METADANE (VERSION INFO) ---


FileVersion      : 5.4
ProductVersion   : 5.4
LegalCopyright   : Copyright 2018 by Don HO
OriginalFilename : gup.exe
CompanyName      : Don HO don.h@free.fr



--- PODPIS CYFROWY ---


Status                 : Valid
SignerCertificate      : [Subject]
                           E=don.h@free.fr, CN="NOTEPAD++", O="NOTEPAD++", L=Paris, S=Île-de-France, C=FR
                         
                         [Issuer]
                           CN=GlobalSign GCC R45 CodeSigning CA 2020, O=GlobalSign nv-sa, C=BE
                         
                         [Serial Number]
                           05F0D813D6A6F004575A2099
                         
                         [Not Before]
                           09.10.2025 11:38:55
                         
                         [Not After]
                           09.10.2028 11:38:55
                         
                         [Thumbprint]
                           1E8E0D13B608BA908572C1A129FAEC5D228DF8A2
                         
TimeStamperCertificate : [Subject]
                           CN=Globalsign TSA for CodeSign1 - R6, O=GlobalSign nv-sa, C=BE
                         
                         [Issuer]
                           CN=GlobalSign Timestamping CA - SHA384 - G4, O=GlobalSign nv-sa, C=BE
                         
                         [Serial Number]
                           01000B2005B3940762DB3E3679949BA9
                         
                         [Not Before]
                           11.04.2025 16:47:39
                         
                         [Not After]
                           10.12.2034 01:00:00
                         
                         [Thumbprint]
                           C625B554BF13E9CB8A5C099BC37BF58485D890E5
                         



--- HASH (SHA256) ---


Algorithm : SHA256
Hash      : 56ACAD5582313E1CAD6FACB245EBE5B127AAB5806D733C243689A062934E229F
Path      : C:\program files\notepad++\updater\gup.exe

</code></pre>
]]></description><link>https://community.notepad-plus-plus.org/topic/27421/gup-exe-never-seen-that-process-on-my-pc</link><generator>RSS for Node</generator><lastBuildDate>Thu, 10 Sep 2026 04:33:05 GMT</lastBuildDate><atom:link href="https://community.notepad-plus-plus.org/topic/27421.rss" rel="self" type="application/rss+xml"/><pubDate>Wed, 18 Feb 2026 09:42:19 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to gup.exe - never seen that process on my pc on Wed, 18 Feb 2026 13:30:53 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/akurzawa" aria-label="Profile: akurzawa">@<bdi>akurzawa</bdi></a> ,</p>
<p dir="auto">gup.exe is the binary that Notepad++ uses when it is asking the server if there are updates available, and when you are installing plugins using Plugins Admin.</p>
<p dir="auto">The destination IP that your screenshot shows is the current IP for <a href="http://norepad-plus-plus.org" rel="nofollow ugc">norepad-plus-plus.org</a></p>
<p dir="auto">I am not an expert on the format of your output, but everything I see seems legit to me.</p>
]]></description><link>https://community.notepad-plus-plus.org/post/104786</link><guid isPermaLink="true">https://community.notepad-plus-plus.org/post/104786</guid><dc:creator><![CDATA[PeterJones]]></dc:creator><pubDate>Wed, 18 Feb 2026 13:30:53 GMT</pubDate></item></channel></rss>