ad65a8e1e06be3dca1c85f61ca242a47bf75decf550b98938ba61e7b3a4b7aa6

Sharing

Copy URL Twitter E-mail

General

Target
ad65a8e1e06be3dca1c85f61ca242a47bf75decf550b98938ba61e7b3a4b7aa6
Size 1.3MB
Sample260820-b8fqdsdk8w
SHA256 ad65a8e1e06be3dca1c85f61ca242a47bf75decf550b98938ba61e7b3a4b7aa6
MD5 a323107f2a3825fbb992bd60906a4bbe
SHA1 21716e2bc64a6f479b0e8aa72a5915b36c6d72d4
SHA512 25c207939cdd1022548d2e50f02a1820dbb5a8639236227516cec143a7b30e0d6bc90a2a9c2764b16ee856f286bb55fa2c4ec3b6c96f7b8431057e2f2173b4c2
SSDEEP 24576:Ri4QXedZMh1J59DWBToFhCtHQzkKf+Frqqf/AC3YvQPVifEh0:aiCrWBTGCpoX+0bMMO0
TLSH
T1F15533ACACB77AFADE75E3D5017BFCC0B405686A873BEB42442659FD4F5BA121E00046
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Notepad4.exe
unpack001/matepath.exe

File Explorer

ad65a8e1e06be3dca1c85f61ca242a47bf75decf550b98938ba61e7b3a4b7aa6

.zip 1.3MB
License.txt

12KB
Notepad4 DarkTheme.ini-default

20KB
Notepad4.exe

.exe 3.0MB
Notepad4.ini-default

2KB
matepath.exe

.exe 775KB
matepath.ini-default

1KB

ad65a8e1e06be3dca1c85f61ca242a47bf75decf550b98938ba61e7b3a4b7aa6

SHA256 ad65a8e1e06be3dca1c85f61ca242a47bf75decf550b98938ba61e7b3a4b7aa6
MD5 a323107f2a3825fbb992bd60906a4bbe
SHA1 21716e2bc64a6f479b0e8aa72a5915b36c6d72d4
SHA512 25c207939cdd1022548d2e50f02a1820dbb5a8639236227516cec143a7b30e0d6bc90a2a9c2764b16ee856f286bb55fa2c4ec3b6c96f7b8431057e2f2173b4c2
SSDEEP 24576:Ri4QXedZMh1J59DWBToFhCtHQzkKf+Frqqf/AC3YvQPVifEh0:aiCrWBTGCpoX+0bMMO0
TLSH
T1F15533ACACB77AFADE75E3D5017BFCC0B405686A873BEB42442659FD4F5BA121E00046
MD5 SHA1 SHA512 SSDEEP TLSH

Notepad4.exe

IMPHASH 2a11d517ccfbf58391ec9486a7c29847
SHA256 18f45d6bd6fdb4c31931e8adf7a8f89c96512bf3b907774774f46d471b11909f
MD5 d4e148dfb59096d7e87228ee4657103a
SHA1 dcb449af81705e5bfdceee7a1588fe144e8caf73
SHA512 96367d89a4508d51f20a1990ab2dd26b58529300ef4acf3cf3d47e7eb5ac1b32f1cd3994e759adb2cc8a6f58d0900b0724490e76e2ef45cab124d73a7540306f
SSDEEP 98304:3DP7Dp+Daow/3/9YnM1f+oFPaP8dTImd+ekYiUk1:3DP7Dp+Daow/3/9YnM1f+oFPaP8dTImc
TLSH
T18AE52961617195CAD02282BCC22A2BB1DEF07C695320C5DF18F47C9E2BB7ED91D6634E
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1309200

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\notepad4\notepad4\build\bin\Release\x64\Notepad4.pdb

comctl32

InitCommonControlsEx CreateStatusWindowW ImageList_GetIconSize ord8 ImageList_Draw ImageList_Destroy ImageList_Create ord381 ImageList_ReplaceIcon ImageList_AddMasked ord412 ord410 ord380 ord413

shlwapi

PathCombineW StrRetToBufW StrStrW StrCatBuffW PathFindExtensionW PathUnquoteSpacesW PathIsUNCW StrTrimW SHAutoComplete StrStrIW PathRemoveFileSpecW PathFindFileNameW PathQuoteSpacesW PathIsDirectoryW StrRChrW PathRemoveExtensionW PathCompactPathExW PathStripToRootW PathGetDriveNumberW PathCommonPrefixW PathCanonicalizeW PathIsRootW PathUnExpandEnvStringsW PathIsPrefixW PathRelativePathToW UrlEscapeW StrTrimA PathAppendW PathIsRelativeW StrFormatByteSizeW UrlUnescapeW PathMatchSpecW StrCmpLogicalW StrStrIA StrChrW

imm32

ImmSetCompositionStringW ImmEscapeW ImmGetCompositionStringW ImmSetCompositionWindow ImmSetCompositionFontW ImmReleaseContext ImmGetContext ImmNotifyIME ImmSetCandidateWindow

uxtheme

IsAppThemed SetWindowTheme

kernel32

GlobalAlloc GlobalLock WideCharToMultiByte GetTickCount GlobalUnlock lstrlenW GetTimeFormatEx GetLocaleInfoEx GetDateFormatEx lstrcatW GetLocalTime GetCurrentThreadId WritePrivateProfileStringW lstrcpynW ExpandEnvironmentStringsW GetPrivateProfileIntW GetModuleFileNameW GetFileAttributesW GetVersionExW FormatMessageW CreateThread GetCurrentDirectoryW LocalFree lstrcpyW CompareStringOrdinal ReadFile GetFileInformationByHandleEx GetFileSizeEx GetFullPathNameW WriteFile SetEndOfFile CreateFileW GetACP GetPrivateProfileStringW GetTimeZoneInformation ReleaseSRWLockExclusive SetFileInformationByHandle GlobalMemoryStatusEx GetOEMCP IsValidCodePage SizeofResource GetCurrentProcess GetFinalPathNameByHandleW GetPrivateProfileSectionW GetPrivateProfileSectionNamesW FreeResource CreateEventW GetFileInformationByHandle SetEvent LockResource ResetEvent LoadResource FindResourceW Sleep WritePrivateProfileSectionW GetCommandLineW GetLongPathNameW SetErrorMode FindFirstChangeNotificationW GetVersion SetFileAttributesW GetFileAttributesExW FindCloseChangeNotification DeleteFileW GlobalFree FindNextChangeNotification SetCurrentDirectoryW GetCurrentProcessId GetProcessHeap CreateProcessW CopyFileW GetSystemTimeAsFileTime GetSystemTime SetUnhandledExceptionFilter GetUserDefaultLocaleName GetSystemDefaultLocaleName IsValidLocaleName ExitProcess DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection EncodePointer FlsFree FlsSetValue FlsGetValue FlsAlloc SetLastError RaiseException RtlPcToFileHeader RtlUnwindEx RtlLookupFunctionEntry InitializeSListHead GetStartupInfoW WaitForThreadpoolWorkCallbacks HeapFree CloseThreadpoolWork GetNativeSystemInfo CloseHandle WaitForSingleObject CreateWaitableTimerW SetWaitableTimer LCMapStringEx MultiByteToWideChar GetStringTypeExW TerminateProcess GetModuleHandleExW GetStdHandle GlobalSize LoadLibraryExW MulDiv QueryPerformanceCounter FreeLibrary GetModuleHandleW GetProcAddress QueryPerformanceFrequency HeapAlloc CreateThreadpoolWork SubmitThreadpoolWork GetWindowsDirectoryW AcquireSRWLockExclusive IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter GetFileType VirtualProtect LCMapStringW FindClose FindFirstFileExW FindNextFileW GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode HeapSize HeapReAlloc WriteConsoleW GetLastError

user32

IntersectRect EnumWindows SetMenu GetForegroundWindow SetMenuDefaultItem CountClipboardFormats SetWindowPlacement IsDialogMessageW OffsetRect GetSubMenu LoadAcceleratorsW GetWindowPlacement ShowOwnedPopups EqualRect IsWindowVisible InsertMenuItemW CheckMenuRadioItem MapVirtualKeyW ShowWindowAsync LoadMenuW GetMessageW GetMessagePos GetMenuItemInfoW RemoveClipboardFormatListener CallNextHookEx SetWindowsHookExW LoadStringW SendDlgItemMessageW wsprintfW GetDlgItem UpdateWindow FillRect FrameRect SetScrollInfo RegisterClipboardFormatW GetKeyState GetUpdateRgn PostMessageW HideCaret ScreenToClient NotifyWinEvent GetScrollInfo MsgWaitForMultipleObjects SetCaretPos OpenClipboard SetTimer GetKeyboardLayoutNameW CloseClipboard EmptyClipboard IsChild CreateCaret ValidateRect TrackMouseEvent GetClipboardSequenceNumber GetMessageTime SetFocus GetClipboardData DestroyCaret SetClipboardData IsClipboardFormatAvailable GetCaretBlinkTime ShowCaret KillTimer GetParent PtInRect GetWindowLongW AdjustWindowRectEx MonitorFromPoint DestroyWindow GetDC CopyImage MonitorFromRect MonitorFromWindow GetIconInfo GetSystemMetrics CreatePopupMenu DestroyCursor TrackPopupMenu ShowWindow GetMonitorInfoW CreateIconIndirect ClientToScreen GetDoubleClickTime GetSysColor DestroyMenu SetCursor GetClientRect SystemParametersInfoW LoadImageW InvalidateRect TrackPopupMenuEx CheckMenuItem IsZoomed AddClipboardFormatListener PostQuitMessage EnableMenuItem RegisterWindowMessageW IsIconic DrawAnimatedRects DeferWindowPos GetWindow FindWindowExW GetMenu SetActiveWindow BeginDeferWindowPos DispatchMessageW PeekMessageW DialogBoxIndirectParamW SetLayeredWindowAttributes TranslateMessage GetClassNameW EndDeferWindowPos MapDialogRect SetWindowLongW SetRect CreateDialogIndirectParamW SetForegroundWindow SetCursorPos SendInput IsCharLowerW CharUpperW CharLowerW GetFocus GetComboBoxInfo IsCharUpperW GetWindowTextW ReleaseDC DefWindowProcW GetWindowRect SetWindowPos SetWindowLongPtrW CreateWindowExW SendMessageW UnregisterClassW GetWindowLongPtrW RegisterClassExW RedrawWindow MapWindowPoints LoadCursorW SetCapture ReleaseCapture GetCursorPos BeginPaint EndPaint GetWindowTextLengthW CheckRadioButton GetPropW MessageBoxExW TranslateAcceleratorW EndDialog RemovePropW SetWindowTextW MessageBeep GetActiveWindow wvsprintfW DestroyIcon SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW IsWindowEnabled IsDlgButtonChecked IsCharAlphaNumericW SetPropW LoadIconW GetDlgItemInt CheckDlgButton GetSysColorBrush SetDlgItemInt GetKeyboardLayout EnableWindow UnhookWindowsHookEx

gdi32

CreateSolidBrush RestoreDC Ellipse SetBkColor MoveToEx Polygon ExtCreatePen CreateBitmap LineTo SetBkMode SetTextColor GetTextExtentPoint32W CreatePatternBrush GetTextMetricsW SetTextAlign Polyline GdiAlphaBlend GetTextExtentExPointW GetTextExtentPoint32A ExtTextOutA SaveDC CreateCompatibleBitmap EndPage DPtoLP StartDocW CreateFontW EndDoc StartPage TranslateCharsetInfo EnumFontFamiliesExW RoundRect ExtTextOutW IntersectClipRect CreateRectRgnIndirect GetTextExtentExPointA CombineRgn SelectObject CreateDIBSection CreateCompatibleDC StretchBlt GetDeviceCaps DeleteDC GetObjectW BitBlt DeleteObject CreateRectRgn CreatePen CreateFontIndirectW

comdlg32

ChooseFontW PageSetupDlgW PrintDlgW ChooseColorW

advapi32

RegQueryValueExW RegGetValueW RegOpenKeyExW RegCloseKey RegDeleteValueW RegDeleteTreeW RegCreateKeyExW IsTextUnicode GetTokenInformation OpenProcessToken RegSetValueExW

shell32

ord180 SHCreateItemFromParsingName SHAppBarMessage SHOpenFolderAndSelectItems SHGetKnownFolderPath ord190 SHGetDesktopFolder DragQueryPoint Shell_NotifyIconW SHCreateDirectoryExW DragAcceptFiles DragFinish SHAddToRecentDocs SHGetFileInfoW SHGetDataFromIDListW ShellExecuteExW DragQueryFileW ShellExecuteW

ole32

OleUninitialize CoTaskMemAlloc CoCreateGuid OleInitialize RevokeDragDrop RegisterDragDrop DoDragDrop ReleaseStgMedium CLSIDFromProgID CoCreateInstance CoTaskMemFree

oleaut32

VariantClear SysFreeString SysAllocStringLen VariantInit

Name

.text

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

747KB

Virtual Size

746KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

71KB

Virtual Size

165KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

47KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

807KB

Virtual Size

807KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

matepath.exe

IMPHASH 051b06063695ab789a702dee7aafca43
SHA256 fb1c2c04a406ee41797d248f505c81f8095bacdb34161e0469b2a58c61c3b963
MD5 a508d374e9198d8b9eacbd38acec2cad
SHA1 2c6ed75353d9c910498ecb37d7d9339b59328208
SHA512 6da9e3b955768a08e35708e70d8b1b2b31f2b45d399ada2ea22811f1db6037e5beca2a5bbe802e74b1df9b84e3342df78600aa2c64bfd7fd2c3bdfdbfd96538c
SSDEEP 6144:4D2/k89ifLcy6HbWbXKSuBW9HIZd0hiZ9ibWwINq+9kbuE9e6j6pXZ:K2/k5jj6HXbEHOdNidgrZ
TLSH
T13EF4BA223412D64AC92202BDC15A6FB0DDF5BC2D6320DCFE24A9BD0FE5F9A48245579F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

95840

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\notepad4\notepad4\build\bin\Release\x64\matepath.pdb

comctl32

ord380 InitCommonControlsEx ImageList_Destroy ImageList_Create ImageList_AddMasked ord413 PropertySheetW ord412 ord410 CreateStatusWindowW

shlwapi

PathAppendW PathIsRelativeW StrCatBuffW PathAddBackslashW SHAutoComplete StrStrIW PathFindFileNameW PathUnquoteSpacesW PathIsDirectoryW StrRChrW StrFormatByteSizeW PathCompactPathExW StrStrW PathCommonPrefixW PathFindExtensionW PathCanonicalizeW PathIsRootW PathUnExpandEnvStringsW PathIsPrefixW PathRelativePathToW PathRemoveFileSpecW PathCombineW PathRemoveBackslashW PathIsSameRootW StrRetToBufW StrChrW StrTrimW PathMatchSpecW PathQuoteSpacesW

uxtheme

IsAppThemed SetWindowTheme

kernel32

GetStringTypeW GetFileType SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetCommandLineA GetCPInfo GetOEMCP GetACP GetCurrentThreadId WritePrivateProfileStringW HeapFree lstrcpynW ExpandEnvironmentStringsW GetShortPathNameW GetModuleFileNameW GetPrivateProfileSectionW GetFileAttributesW GetVersionExW GetSystemDirectoryW SetFileAttributesW GetPrivateProfileStringW lstrcatW GetNativeSystemInfo HeapAlloc GetCurrentDirectoryW lstrcpyW WritePrivateProfileSectionW CompareStringOrdinal WaitForSingleObject CreateThread SizeofResource SearchPathW GetFullPathNameW GetCurrentProcess lstrlenW GetFinalPathNameByHandleW GetLocaleInfoEx CreateFileW GetPrivateProfileSectionNamesW FreeResource OpenProcess CreateEventW SetEvent LockResource GlobalAlloc CloseHandle ResetEvent LoadResource GetWindowsDirectoryW GetProcAddress GlobalLock GetModuleHandleW QueryFullProcessImageNameW GlobalUnlock MulDiv CreateDirectoryW GetFileSizeEx GetCommandLineW WriteFile GetTimeFormatEx SetErrorMode GetDateFormatEx FindFirstChangeNotificationW GetFileAttributesExW GlobalSize FileTimeToSystemTime FindCloseChangeNotification GlobalFree FileTimeToLocalFileTime FindNextChangeNotification SetCurrentDirectoryW GetProcessHeap FreeLibrary CopyFileW LoadLibraryExW IsValidCodePage FindNextFileW FindFirstFileExW FindClose UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext IsProcessorFeaturePresent GetModuleHandleExW TerminateProcess ExitProcess GetStdHandle RtlPcToFileHeader DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection RaiseException EncodePointer FlsFree FlsSetValue FlsGetValue FlsAlloc SetLastError GetLastError RtlUnwindEx RtlLookupFunctionEntry GetStartupInfoW SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter VirtualProtect LCMapStringW HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx WriteConsoleW FindResourceW

user32

SetMenuDefaultItem SetWindowPlacement SetMenuItemInfoW SetTimer OffsetRect GetSubMenu TrackPopupMenu LoadAcceleratorsW GetWindowPlacement RegisterClassExW UnregisterClassW GetSystemMetrics DeleteMenu ShowOwnedPopups MonitorFromWindow EqualRect IsWindowVisible GetFocus MonitorFromPoint ShowWindowAsync LoadMenuW GetKeyState AdjustWindowRectEx GetSystemMenu DefWindowProcW GetMenuItemInfoW GetMessageW GetMessageTime GetPropW RemovePropW SetPropW GetWindowLongW GetWindowTextLengthW PostMessageW CheckMenuRadioItem GetWindowRect DestroyWindow SetWindowPos CheckRadioButton MessageBoxExW SetWindowLongPtrW IntersectRect EndDialog SetWindowTextW MessageBeep CreatePopupMenu GetWindowLongPtrW SetCursorPos SetFocus BringWindowToTop TranslateAcceleratorW CheckMenuItem IsZoomed KillTimer PostQuitMessage EnableMenuItem RegisterWindowMessageW UpdateWindow IsIconic GetWindowThreadProcessId DrawAnimatedRects DeferWindowPos GetWindow FindWindowExW GetDC CopyImage MonitorFromRect SetActiveWindow BeginDeferWindowPos OpenClipboard DispatchMessageW RedrawWindow DdeCreateStringHandleW DdeConnect GetMonitorInfoW WindowFromPoint DestroyCursor LoadStringW GetActiveWindow ShowWindow wvsprintfW DestroyIcon SetDlgItemTextW GetDlgItemTextW SendDlgItemMessageW GetSysColor IsWindowEnabled IsDlgButtonChecked DestroyMenu GetMenuStringW LoadIconW LoadCursorW GetClassNameW SetCapture SetCursor wsprintfW TrackPopupMenuEx GetComboBoxInfo GetDlgItem AppendMenuW CheckDlgButton ReleaseCapture InvalidateRect ChildWindowFromPoint GetCursorPos EnableWindow GetWindowTextW SendMessageW CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW GetParent CloseClipboard EmptyClipboard PeekMessageW MapWindowPoints EnumWindows DdeInitializeW DdeUninitialize DialogBoxIndirectParamW ReleaseDC SetLayeredWindowAttributes TranslateMessage EndDeferWindowPos SetClipboardData MapDialogRect SetWindowLongW GetClientRect SetRect DdeDisconnect SystemParametersInfoW DdeFreeStringHandle SetForegroundWindow LoadImageW CreateWindowExW DdeClientTransaction

gdi32

GetObjectW DeleteObject CreateSolidBrush SelectObject GetDeviceCaps GetTextExtentPoint32W CreateFontIndirectW

comdlg32

ChooseColorW

advapi32

RegOpenKeyExW RegDeleteTreeW RegCreateKeyExW RegCloseKey GetTokenInformation OpenProcessToken RegSetValueExW RegGetValueW

shell32

SHFileOperationW SHGetKnownFolderIDList ShellExecuteExW SHGetPathFromIDListW SHGetDataFromIDListW SHGetDesktopFolder ord180 SHCreateItemFromParsingName SHAppBarMessage SHOpenFolderAndSelectItems SHGetKnownFolderPath ord190 DragQueryFileW Shell_NotifyIconW SHCreateDirectoryExW DragAcceptFiles DragFinish SHGetFileInfoW ShellExecuteW

ole32

CoCreateInstance DoDragDrop CoTaskMemAlloc CoTaskMemFree OleUninitialize OleInitialize

Name

.text

Size

153KB

Virtual Size

152KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

58KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

550KB

Virtual Size

549KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

ad65a8e1e06be3dca1c85f61ca242a47bf75decf550b98938ba61e7b3a4b7aa6

License.txt

Notepad4 DarkTheme.ini-default

Notepad4.exe

comctl32

shlwapi

imm32

uxtheme

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

generic

Notepad4.ini-default

matepath.exe

comctl32

shlwapi

uxtheme

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

generic

matepath.ini-default