gup.exe - never seen that process on my pc

akurzawa

hello

does anyone know if this is legit?

notepad++ 8.9.2

C:\program files\notepad++\updater\gup.exe

--- PLIK ---


Name          : gup.exe
Length        : 1310848
CreationTime  : 16.02.2026 13:12:14
LastWriteTime : 16.02.2026 13:12:14



--- METADANE (VERSION INFO) ---


FileVersion      : 5.4
ProductVersion   : 5.4
LegalCopyright   : Copyright 2018 by Don HO
OriginalFilename : gup.exe
CompanyName      : Don HO don.h@free.fr



--- PODPIS CYFROWY ---


Status                 : Valid
SignerCertificate      : [Subject]
                           E=don.h@free.fr, CN="NOTEPAD++", O="NOTEPAD++", L=Paris, S=Île-de-France, C=FR
                         
                         [Issuer]
                           CN=GlobalSign GCC R45 CodeSigning CA 2020, O=GlobalSign nv-sa, C=BE
                         
                         [Serial Number]
                           05F0D813D6A6F004575A2099
                         
                         [Not Before]
                           09.10.2025 11:38:55
                         
                         [Not After]
                           09.10.2028 11:38:55
                         
                         [Thumbprint]
                           1E8E0D13B608BA908572C1A129FAEC5D228DF8A2
                         
TimeStamperCertificate : [Subject]
                           CN=Globalsign TSA for CodeSign1 - R6, O=GlobalSign nv-sa, C=BE
                         
                         [Issuer]
                           CN=GlobalSign Timestamping CA - SHA384 - G4, O=GlobalSign nv-sa, C=BE
                         
                         [Serial Number]
                           01000B2005B3940762DB3E3679949BA9
                         
                         [Not Before]
                           11.04.2025 16:47:39
                         
                         [Not After]
                           10.12.2034 01:00:00
                         
                         [Thumbprint]
                           C625B554BF13E9CB8A5C099BC37BF58485D890E5
                         



--- HASH (SHA256) ---


Algorithm : SHA256
Hash      : 56ACAD5582313E1CAD6FACB245EBE5B127AAB5806D733C243689A062934E229F
Path      : C:\program files\notepad++\updater\gup.exe

PeterJones

@akurzawa ,

gup.exe is the binary that Notepad++ uses when it is asking the server if there are updates available, and when you are installing plugins using Plugins Admin.

The destination IP that your screenshot shows is the current IP for norepad-plus-plus.org

I am not an expert on the format of your output, but everything I see seems legit to me.