e771a04394bc5c11b12493e9ffeab7ea99ea06176d10b3cd517ac7b7e2365162

Sharing

Copy URL Twitter E-mail

General

Target
e771a04394bc5c11b12493e9ffeab7ea99ea06176d10b3cd517ac7b7e2365162
Size 1.1MB
Sample260831-qe7pcasemd
SHA256 e771a04394bc5c11b12493e9ffeab7ea99ea06176d10b3cd517ac7b7e2365162
MD5 99c47cc567a1aeb1eb9cdba6a84dc7bc
SHA1 db0953aa59f4b1fdf2ffb596155b4ec9cb1b0961
SHA512 6b8a7d4206a5fbc6f96fd92d19297077aef3a09444ce2d81e278a0ffcd89ee2676e0bdf9f72062bf64abc95f0c26e136922161f83b6fff5bcd8157ff9d230b31
SSDEEP 24576:xJl9agAptU3v+ZUnCGhJC5kR2GmqSkDiPdLjIWEUUA0Wj1ECUAF61r:xJc0fPCGhJ6iBSkDiPd9UA0WpoA4r
TLSH
T1AC4533077C436C69EC4E7CF409AE06AA174D97E4B4B7BCD18623F2BB50A9AE38531315
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Notepad4.exe
unpack001/matepath.exe

File Explorer

e771a04394bc5c11b12493e9ffeab7ea99ea06176d10b3cd517ac7b7e2365162

.zip 1.1MB
License.txt

12KB
Notepad4 DarkTheme.ini-default

20KB
Notepad4.exe

.exe 2.3MB
Notepad4.ini-default

2KB
matepath.exe

.exe 280KB
matepath.ini-default

1KB

e771a04394bc5c11b12493e9ffeab7ea99ea06176d10b3cd517ac7b7e2365162

SHA256 e771a04394bc5c11b12493e9ffeab7ea99ea06176d10b3cd517ac7b7e2365162
MD5 99c47cc567a1aeb1eb9cdba6a84dc7bc
SHA1 db0953aa59f4b1fdf2ffb596155b4ec9cb1b0961
SHA512 6b8a7d4206a5fbc6f96fd92d19297077aef3a09444ce2d81e278a0ffcd89ee2676e0bdf9f72062bf64abc95f0c26e136922161f83b6fff5bcd8157ff9d230b31
SSDEEP 24576:xJl9agAptU3v+ZUnCGhJC5kR2GmqSkDiPdLjIWEUUA0Wj1ECUAF61r:xJc0fPCGhJ6iBSkDiPd9UA0WpoA4r
TLSH
T1AC4533077C436C69EC4E7CF409AE06AA174D97E4B4B7BCD18623F2BB50A9AE38531315
MD5 SHA1 SHA512 SSDEEP TLSH

Notepad4.exe

IMPHASH 2a11d517ccfbf58391ec9486a7c29847
SHA256 eac56bdb0b41494977307fdcb8948be8174667f5c53f904c382e828b412cba1e
MD5 96ee5ea9e118729f5b9243c5f7ec012d
SHA1 3e97ec57241ff7c2987142d388a8f1ed83a718ec
SHA512 acd2b6ac945a22e9831e8eab3571322e21fc578ce73811576c9f9bb09352e844aebebdeea4c5438ab7debdf7113da62c0e06f2e2048e596bfb2e9b543c047624
SSDEEP 49152:8OklGA+he1ODaow/3/9T+M1f+oFPPuduaLJ2zdF5g6vUGLT4f2xPK4T18iMxvjMQ:8Dfge1ODaow/3/9T+M1f+oFPPuduaLJr
TLSH
T1A7B5CF56B2F400DDD063C1B8D6675223DB71749923308BDB9AD4D9AA2F23AE45F3B321
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1308960

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\notepad4\notepad4\build\bin\Release\x64\Notepad4.pdb

comctl32

InitCommonControlsEx CreateStatusWindowW ImageList_GetIconSize ord8 ImageList_Draw ImageList_Destroy ImageList_Create ord381 ImageList_ReplaceIcon ImageList_AddMasked ord412 ord410 ord380 ord413

shlwapi

PathCombineW StrRetToBufW StrStrW StrCatBuffW PathFindExtensionW PathUnquoteSpacesW PathIsUNCW StrTrimW SHAutoComplete StrStrIW PathRemoveFileSpecW PathFindFileNameW PathQuoteSpacesW PathIsDirectoryW StrRChrW PathRemoveExtensionW PathCompactPathExW PathStripToRootW PathGetDriveNumberW PathCommonPrefixW PathCanonicalizeW PathIsRootW PathUnExpandEnvStringsW PathIsPrefixW PathRelativePathToW UrlEscapeW StrTrimA PathAppendW PathIsRelativeW StrFormatByteSizeW UrlUnescapeW PathMatchSpecW StrCmpLogicalW StrStrIA StrChrW

imm32

ImmSetCompositionStringW ImmEscapeW ImmGetCompositionStringW ImmSetCompositionWindow ImmSetCompositionFontW ImmReleaseContext ImmGetContext ImmNotifyIME ImmSetCandidateWindow

uxtheme

IsAppThemed SetWindowTheme

kernel32

GlobalAlloc GlobalLock WideCharToMultiByte GetTickCount GlobalUnlock lstrlenW GetTimeFormatEx GetLocaleInfoEx GetDateFormatEx lstrcatW GetLocalTime GetCurrentThreadId WritePrivateProfileStringW lstrcpynW ExpandEnvironmentStringsW GetPrivateProfileIntW GetModuleFileNameW GetFileAttributesW GetVersionExW FormatMessageW CreateThread GetCurrentDirectoryW LocalFree lstrcpyW CompareStringOrdinal ReadFile GetFileInformationByHandleEx GetFileSizeEx GetFullPathNameW WriteFile SetEndOfFile CreateFileW GetACP GetPrivateProfileStringW GetTimeZoneInformation ReleaseSRWLockExclusive SetFileInformationByHandle GlobalMemoryStatusEx GetOEMCP IsValidCodePage SizeofResource GetCurrentProcess GetFinalPathNameByHandleW GetPrivateProfileSectionW GetPrivateProfileSectionNamesW FreeResource CreateEventW GetFileInformationByHandle SetEvent LockResource ResetEvent LoadResource FindResourceW Sleep WritePrivateProfileSectionW GetCommandLineW GetLongPathNameW SetErrorMode FindFirstChangeNotificationW GetVersion SetFileAttributesW GetFileAttributesExW FindCloseChangeNotification DeleteFileW GlobalFree FindNextChangeNotification SetCurrentDirectoryW GetCurrentProcessId GetProcessHeap CreateProcessW CopyFileW GetSystemTimeAsFileTime GetSystemTime SetUnhandledExceptionFilter GetUserDefaultLocaleName GetSystemDefaultLocaleName IsValidLocaleName ExitProcess DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection EncodePointer FlsFree FlsSetValue FlsGetValue FlsAlloc SetLastError RaiseException RtlPcToFileHeader RtlUnwindEx RtlLookupFunctionEntry InitializeSListHead GetStartupInfoW WaitForThreadpoolWorkCallbacks HeapFree CloseThreadpoolWork GetNativeSystemInfo CloseHandle WaitForSingleObject CreateWaitableTimerW SetWaitableTimer LCMapStringEx MultiByteToWideChar GetStringTypeExW TerminateProcess GetModuleHandleExW GetStdHandle GlobalSize LoadLibraryExW MulDiv QueryPerformanceCounter FreeLibrary GetModuleHandleW GetProcAddress QueryPerformanceFrequency HeapAlloc CreateThreadpoolWork SubmitThreadpoolWork GetWindowsDirectoryW AcquireSRWLockExclusive IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter GetFileType VirtualProtect LCMapStringW FindClose FindFirstFileExW FindNextFileW GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode HeapSize HeapReAlloc WriteConsoleW GetLastError

user32

IntersectRect EnumWindows SetMenu GetForegroundWindow SetMenuDefaultItem CountClipboardFormats SetWindowPlacement IsDialogMessageW OffsetRect GetSubMenu LoadAcceleratorsW GetWindowPlacement ShowOwnedPopups EqualRect IsWindowVisible InsertMenuItemW CheckMenuRadioItem MapVirtualKeyW ShowWindowAsync LoadMenuW GetMessageW GetMessagePos GetMenuItemInfoW RemoveClipboardFormatListener CallNextHookEx SetWindowsHookExW LoadStringW SendDlgItemMessageW wsprintfW GetDlgItem UpdateWindow FillRect FrameRect SetScrollInfo RegisterClipboardFormatW GetKeyState GetUpdateRgn PostMessageW HideCaret ScreenToClient NotifyWinEvent GetScrollInfo MsgWaitForMultipleObjects SetCaretPos OpenClipboard SetTimer GetKeyboardLayoutNameW CloseClipboard EmptyClipboard IsChild CreateCaret ValidateRect TrackMouseEvent GetClipboardSequenceNumber GetMessageTime SetFocus GetClipboardData DestroyCaret SetClipboardData IsClipboardFormatAvailable GetCaretBlinkTime ShowCaret KillTimer GetParent PtInRect GetWindowLongW AdjustWindowRectEx MonitorFromPoint DestroyWindow GetDC CopyImage MonitorFromRect MonitorFromWindow GetIconInfo GetSystemMetrics CreatePopupMenu DestroyCursor TrackPopupMenu ShowWindow GetMonitorInfoW CreateIconIndirect ClientToScreen GetDoubleClickTime GetSysColor DestroyMenu SetCursor GetClientRect SystemParametersInfoW LoadImageW InvalidateRect TrackPopupMenuEx CheckMenuItem IsZoomed AddClipboardFormatListener PostQuitMessage EnableMenuItem RegisterWindowMessageW IsIconic DrawAnimatedRects DeferWindowPos GetWindow FindWindowExW GetMenu SetActiveWindow BeginDeferWindowPos DispatchMessageW PeekMessageW DialogBoxIndirectParamW SetLayeredWindowAttributes TranslateMessage GetClassNameW EndDeferWindowPos MapDialogRect SetWindowLongW SetRect CreateDialogIndirectParamW SetForegroundWindow SetCursorPos SendInput IsCharLowerW CharUpperW CharLowerW GetFocus GetComboBoxInfo IsCharUpperW GetWindowTextW ReleaseDC DefWindowProcW GetWindowRect SetWindowPos SetWindowLongPtrW CreateWindowExW SendMessageW UnregisterClassW GetWindowLongPtrW RegisterClassExW RedrawWindow MapWindowPoints LoadCursorW SetCapture ReleaseCapture GetCursorPos BeginPaint EndPaint GetWindowTextLengthW CheckRadioButton GetPropW MessageBoxExW TranslateAcceleratorW EndDialog RemovePropW SetWindowTextW MessageBeep GetActiveWindow wvsprintfW DestroyIcon SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW IsWindowEnabled IsDlgButtonChecked IsCharAlphaNumericW SetPropW LoadIconW GetDlgItemInt CheckDlgButton GetSysColorBrush SetDlgItemInt GetKeyboardLayout EnableWindow UnhookWindowsHookEx

gdi32

CreateSolidBrush RestoreDC Ellipse SetBkColor MoveToEx Polygon ExtCreatePen CreateBitmap LineTo SetBkMode SetTextColor GetTextExtentPoint32W CreatePatternBrush GetTextMetricsW SetTextAlign Polyline GdiAlphaBlend GetTextExtentExPointW GetTextExtentPoint32A ExtTextOutA SaveDC CreateCompatibleBitmap EndPage DPtoLP StartDocW CreateFontW EndDoc StartPage TranslateCharsetInfo EnumFontFamiliesExW RoundRect ExtTextOutW IntersectClipRect CreateRectRgnIndirect GetTextExtentExPointA CombineRgn SelectObject CreateDIBSection CreateCompatibleDC StretchBlt GetDeviceCaps DeleteDC GetObjectW BitBlt DeleteObject CreateRectRgn CreatePen CreateFontIndirectW

comdlg32

ChooseFontW PageSetupDlgW PrintDlgW ChooseColorW

advapi32

RegQueryValueExW RegGetValueW RegOpenKeyExW RegCloseKey RegDeleteValueW RegDeleteTreeW RegCreateKeyExW IsTextUnicode GetTokenInformation OpenProcessToken RegSetValueExW

shell32

ord180 SHCreateItemFromParsingName SHAppBarMessage SHOpenFolderAndSelectItems SHGetKnownFolderPath ord190 SHGetDesktopFolder DragQueryPoint Shell_NotifyIconW SHCreateDirectoryExW DragAcceptFiles DragFinish SHAddToRecentDocs SHGetFileInfoW SHGetDataFromIDListW ShellExecuteExW DragQueryFileW ShellExecuteW

ole32

OleUninitialize CoTaskMemAlloc CoCreateGuid OleInitialize RevokeDragDrop RegisterDragDrop DoDragDrop ReleaseStgMedium CLSIDFromProgID CoCreateInstance CoTaskMemFree

oleaut32

VariantClear SysFreeString SysAllocStringLen VariantInit

Name

.text

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

747KB

Virtual Size

746KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

71KB

Virtual Size

165KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

47KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

107KB

Virtual Size

107KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

matepath.exe

IMPHASH 051b06063695ab789a702dee7aafca43
SHA256 92cd4ebbea3b22afa3c0cdd2dff28db9f071173a7496d04a9f9e60426a2586f8
MD5 7d7ccda1545e3b8da6d5c2dcd274765d
SHA1 2eedf5f9820351a9e85f0f07261faa447d55e3dd
SHA512 f417c7275b64accb5fbcd4382ed8ce13a9c4c2b71803d41cbb9e8dbdc29ca03c91064d47aa196ed12df329dc8fed43e9f5be4556f94da78e99b4252dd629e135
SSDEEP 6144:N3YvM8jOaacVjMu9WbX2f56wFgjd0hTPWwINq+9kbupl:RYvMGOaacBMuNfFFAdyql
TLSH
T1E9543912B6B549D9D923817C84838A52DE73FC142720D9EB26A1F92E5FB35C1BC39B31
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

95152

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\notepad4\notepad4\build\bin\Release\x64\matepath.pdb

comctl32

ord380 InitCommonControlsEx ImageList_Destroy ImageList_Create ImageList_AddMasked ord413 PropertySheetW ord412 ord410 CreateStatusWindowW

shlwapi

PathAppendW PathIsRelativeW StrCatBuffW PathAddBackslashW SHAutoComplete StrStrIW PathFindFileNameW PathUnquoteSpacesW PathIsDirectoryW StrRChrW StrFormatByteSizeW PathCompactPathExW StrStrW PathCommonPrefixW PathFindExtensionW PathCanonicalizeW PathIsRootW PathUnExpandEnvStringsW PathIsPrefixW PathRelativePathToW PathRemoveFileSpecW PathCombineW PathRemoveBackslashW PathIsSameRootW StrRetToBufW StrChrW StrTrimW PathMatchSpecW PathQuoteSpacesW

uxtheme

IsAppThemed SetWindowTheme

kernel32

GetStringTypeW GetFileType SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetCommandLineA GetCPInfo GetOEMCP GetACP GetCurrentThreadId WritePrivateProfileStringW HeapFree lstrcpynW ExpandEnvironmentStringsW GetShortPathNameW GetModuleFileNameW GetPrivateProfileSectionW GetFileAttributesW GetVersionExW GetSystemDirectoryW SetFileAttributesW GetPrivateProfileStringW lstrcatW GetNativeSystemInfo HeapAlloc GetCurrentDirectoryW lstrcpyW WritePrivateProfileSectionW CompareStringOrdinal WaitForSingleObject CreateThread SizeofResource SearchPathW GetFullPathNameW GetCurrentProcess lstrlenW GetFinalPathNameByHandleW GetLocaleInfoEx CreateFileW GetPrivateProfileSectionNamesW FreeResource OpenProcess CreateEventW SetEvent LockResource GlobalAlloc CloseHandle ResetEvent LoadResource GetWindowsDirectoryW GetProcAddress GlobalLock GetModuleHandleW QueryFullProcessImageNameW GlobalUnlock MulDiv CreateDirectoryW GetFileSizeEx GetCommandLineW WriteFile GetTimeFormatEx SetErrorMode GetDateFormatEx FindFirstChangeNotificationW GetFileAttributesExW GlobalSize FileTimeToSystemTime FindCloseChangeNotification GlobalFree FileTimeToLocalFileTime FindNextChangeNotification SetCurrentDirectoryW GetProcessHeap FreeLibrary CopyFileW LoadLibraryExW IsValidCodePage FindNextFileW FindFirstFileExW FindClose UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext IsProcessorFeaturePresent GetModuleHandleExW TerminateProcess ExitProcess GetStdHandle RtlPcToFileHeader DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection RaiseException EncodePointer FlsFree FlsSetValue FlsGetValue FlsAlloc SetLastError GetLastError RtlUnwindEx RtlLookupFunctionEntry GetStartupInfoW SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter VirtualProtect LCMapStringW HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx WriteConsoleW FindResourceW

user32

SetMenuDefaultItem SetWindowPlacement SetMenuItemInfoW SetTimer OffsetRect GetSubMenu TrackPopupMenu LoadAcceleratorsW GetWindowPlacement RegisterClassExW UnregisterClassW GetSystemMetrics DeleteMenu ShowOwnedPopups MonitorFromWindow EqualRect IsWindowVisible GetFocus MonitorFromPoint ShowWindowAsync LoadMenuW GetKeyState AdjustWindowRectEx GetSystemMenu DefWindowProcW GetMenuItemInfoW GetMessageW GetMessageTime GetPropW RemovePropW SetPropW GetWindowLongW GetWindowTextLengthW PostMessageW CheckMenuRadioItem GetWindowRect DestroyWindow SetWindowPos CheckRadioButton MessageBoxExW SetWindowLongPtrW IntersectRect EndDialog SetWindowTextW MessageBeep CreatePopupMenu GetWindowLongPtrW SetCursorPos SetFocus BringWindowToTop TranslateAcceleratorW CheckMenuItem IsZoomed KillTimer PostQuitMessage EnableMenuItem RegisterWindowMessageW UpdateWindow IsIconic GetWindowThreadProcessId DrawAnimatedRects DeferWindowPos GetWindow FindWindowExW GetDC CopyImage MonitorFromRect SetActiveWindow BeginDeferWindowPos OpenClipboard DispatchMessageW RedrawWindow DdeCreateStringHandleW DdeConnect GetMonitorInfoW WindowFromPoint DestroyCursor LoadStringW GetActiveWindow ShowWindow wvsprintfW DestroyIcon SetDlgItemTextW GetDlgItemTextW SendDlgItemMessageW GetSysColor IsWindowEnabled IsDlgButtonChecked DestroyMenu GetMenuStringW LoadIconW LoadCursorW GetClassNameW SetCapture SetCursor wsprintfW TrackPopupMenuEx GetComboBoxInfo GetDlgItem AppendMenuW CheckDlgButton ReleaseCapture InvalidateRect ChildWindowFromPoint GetCursorPos EnableWindow GetWindowTextW SendMessageW CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW GetParent CloseClipboard EmptyClipboard PeekMessageW MapWindowPoints EnumWindows DdeInitializeW DdeUninitialize DialogBoxIndirectParamW ReleaseDC SetLayeredWindowAttributes TranslateMessage EndDeferWindowPos SetClipboardData MapDialogRect SetWindowLongW GetClientRect SetRect DdeDisconnect SystemParametersInfoW DdeFreeStringHandle SetForegroundWindow LoadImageW CreateWindowExW DdeClientTransaction

gdi32

GetObjectW DeleteObject CreateSolidBrush SelectObject GetDeviceCaps GetTextExtentPoint32W CreateFontIndirectW

comdlg32

ChooseColorW

advapi32

RegOpenKeyExW RegDeleteTreeW RegCreateKeyExW RegCloseKey GetTokenInformation OpenProcessToken RegSetValueExW RegGetValueW

shell32

SHFileOperationW SHGetKnownFolderIDList ShellExecuteExW SHGetPathFromIDListW SHGetDataFromIDListW SHGetDesktopFolder ord180 SHCreateItemFromParsingName SHAppBarMessage SHOpenFolderAndSelectItems SHGetKnownFolderPath ord190 DragQueryFileW Shell_NotifyIconW SHCreateDirectoryExW DragAcceptFiles DragFinish SHGetFileInfoW ShellExecuteW

ole32

CoCreateInstance DoDragDrop CoTaskMemAlloc CoTaskMemFree OleUninitialize OleInitialize

Name

.text

Size

152KB

Virtual Size

152KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

58KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

56KB

Virtual Size

55KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

e771a04394bc5c11b12493e9ffeab7ea99ea06176d10b3cd517ac7b7e2365162

License.txt

Notepad4 DarkTheme.ini-default

Notepad4.exe

comctl32

shlwapi

imm32

uxtheme

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

generic

Notepad4.ini-default

matepath.exe

comctl32

shlwapi

uxtheme

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

generic

matepath.ini-default