218db553b815f11b51e06bf97df3fa5ce00629aba11f71611d03c6e2d316d049
- SHA256 218db553b815f11b51e06bf97df3fa5ce00629aba11f71611d03c6e2d316d049
Overview
overview
3Static
static
3Notepad2-m...��.bat
windows10-2004-x64
3Notepad2-m...��.bat
windows11-ltsc_2024-x64
3Notepad2-m...��.bat
windows10-2004-x64
3Notepad2-m...��.bat
windows11-ltsc_2024-x64
3Notepad2-m...d2.exe
windows10-2004-x64
3Notepad2-m...d2.exe
windows11-ltsc_2024-x64
3Notepad2-m...EN.exe
windows10-2004-x64
3Notepad2-m...EN.exe
windows11-ltsc_2024-x64
3Notepad2-m...��.bat
windows10-2004-x64
3Notepad2-m...��.bat
windows11-ltsc_2024-x64
3Notepad2-m...��.bat
windows10-2004-x64
3Notepad2-m...��.bat
windows11-ltsc_2024-x64
3Notepad2-m...d2.exe
windows10-2004-x64
1Notepad2-m...d2.exe
windows11-ltsc_2024-x64
1Notepad2-m...EN.exe
windows10-2004-x64
1Notepad2-m...EN.exe
windows11-ltsc_2024-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Notepad2-mod/32-bit/!)替换记事本.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Notepad2-mod/32-bit/!)替换记事本.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
Notepad2-mod/32-bit/!)还原记事本.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
Notepad2-mod/32-bit/!)还原记事本.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
Notepad2-mod/32-bit/Notepad2.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
Notepad2-mod/32-bit/Notepad2.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
Notepad2-mod/32-bit/Notepad2_EN.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
Notepad2-mod/32-bit/Notepad2_EN.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
Notepad2-mod/64-bit/!)替换记事本.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
Notepad2-mod/64-bit/!)替换记事本.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral11
Sample
Notepad2-mod/64-bit/!)还原记事本.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral12
Sample
Notepad2-mod/64-bit/!)还原记事本.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral13
Sample
Notepad2-mod/64-bit/Notepad2.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
Notepad2-mod/64-bit/Notepad2.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
Notepad2-mod/64-bit/Notepad2_EN.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
Notepad2-mod/64-bit/Notepad2_EN.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target 218db553b815f11b51e06bf97df3fa5ce00629aba11f71611d03c6e2d316d049
- Size 3.0MB
- Sample261012-1eswasfv81
- SHA256 218db553b815f11b51e06bf97df3fa5ce00629aba11f71611d03c6e2d316d049
- MD5 9f430ea07f9a4eb3fb2be320d4321e34
- SHA1 d36856bd0c165a1bd3bc42d0a3b1788694273ae4
- SHA512 4b3c28529c9392e18e4241344e4baeddf51c31a8055d8367590c1e4add1b92030d3a10e660084139b2fb786bd9393d852c83b3edfeb60604d5e6cfffc9efe2d2
- SSDEEP 49152:sZJudiOKEH7BbJXU9+SueOVOap1ePZO/F2tFtSNXqmIL31JWbnfhROPr181gPkcb:sZlfA1bJkOBOa+PI/EtyRgL31J0X+Ogx
- TLSH T1D0E533F834A54E4FDEA18EBEA205A050B151A1DF166F9F95D78E48F1BCE1213F385A30
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Notepad2-mod/32-bit/Notepad2.exe unpack001/Notepad2-mod/64-bit/Notepad2.exe
File Explorer
-
218db553b815f11b51e06bf97df3fa5ce00629aba11f71611d03c6e2d316d049.zip 3.0MB
-
Notepad2-mod/32-bit/!)替换记事本.bat345B
-
Notepad2-mod/32-bit/!)还原记事本.bat289B
-
Notepad2-mod/32-bit/License.txt1KB
-
Notepad2-mod/32-bit/Notepad2.exe.exe 1.6MB
-
Notepad2-mod/32-bit/Notepad2.txt38KB
-
Notepad2-mod/32-bit/Notepad2_EN.exe.exe 1.6MB
-
Notepad2-mod/32-bit/Readme-mod.txt1KB
-
Notepad2-mod/32-bit/Readme_CN.txt2KB
-
Notepad2-mod/64-bit/!)替换记事本.bat345B
-
Notepad2-mod/64-bit/!)还原记事本.bat282B
-
Notepad2-mod/64-bit/License.txt1KB
-
Notepad2-mod/64-bit/Notepad2.exe.exe 1.9MB
-
Notepad2-mod/64-bit/Notepad2.txt38KB
-
Notepad2-mod/64-bit/Notepad2_EN.exe.exe 1.9MB
-
Notepad2-mod/64-bit/Readme-mod.txt1KB
-
Notepad2-mod/64-bit/Readme_CN.txt2KB
Notepad2-mod/32-bit/!)替换记事本.bat
- SHA256 8d72963998e3dbd0bdd2964d69e1369bc0dbadffdc4f413bc660504b22821bd6
- MD5 eac1036b0c0d891eec82d8fcedf7d1c0
- SHA1 320280f8cfca18d66602c1a69c6fbb887b6946d7
- SHA512 69a58caefd53295bce4764ffacc9e42ceef8cc427498a4d19900294151a842616759bfdf0f0b3b9d2fda17e8186ac4e6185d9ed61db09f2d514d2dbaa0b20111
- TLSH T1CDE026843A314102D2F54C80897B541DBE37E0E7A2121F557492E8B8692FBE1B33E6EA
- MD5 SHA1 SHA512 TLSH
Notepad2-mod/32-bit/!)还原记事本.bat
- SHA256 d829599c2d3f3ead2b1f90ed3c9aef2676261443b4e0be7309da31762c42dad8
- MD5 4759c7c7f84300b3e94fdba672528b02
- SHA1 d0c6f850b049cd4ac0b98266d7f6fc52d0adb09d
- SHA512 45320d4dd96abc6164c3c8f9cd17fe6621584b64f8ca766ebe687448618e22435ad830984b36f8b4cfc2115c7b3795c8b3cf4727546498d2d8fc871e78e17a1c
- TLSH T1D5D0C2893B22010192F188419976841DBE3651E762135F01B0A7D8B4AD26BE5B36E5AB
- MD5 SHA1 SHA512 TLSH
Notepad2-mod/32-bit/License.txt
- SHA256 c1cf2c653df1a9f11a35081694fc13feb9d8faa6791195ca5c633ce006270ed6
- MD5 3f7268de02a0027c1973cea3e43056c8
- SHA1 dd2ba9e4b2376f86fe5b3fb71a86ca7822bce26a
- SHA512 8e1ad5bd0ac065ba5a20ad40c6eb69f2024009ec3558f3922450e25c731d0a12d31a1336cba1e37e90865a58178e118a0ce88f2ae0a9bb3caa78f43623b60531
- TLSH T15C31985741840FA35AF117957626E9C4F09DD03C3B276E01286EF3A8537B03EE677148
- MD5 SHA1 SHA512 TLSH
Notepad2-mod/32-bit/Notepad2.exe
- IMPHASH 5aec183813a5de82610c6ec1e6e0912f
- SHA256 f3498d18d49306230f5510e94fd44416244089319c1f8c872aaf3f7c4d8e67f0
- MD5 904f52f6267dd14b8c23e09000d10c93
- SHA1 2ef436c89c6aa7a0a1ef445fcd95a7d13aba2b7d
- SHA512 1af62f56cccde638c7460c6ff796055043d947aac92de7e66a1c7dabc52b266fbc55ce1b5415002fd0e4a95e69724df7485f8e76b110170089a071177d13745a
- SSDEEP 24576:rIntnK8+xBuKhpSK438pckG0WY9gxdvAp2ei9tige/5ZZ0RQn/+chX/g/ER26yvi:rInt6Z0yn+2VbKjFaUl3QP
- TLSH T15E75AD11BA82D033E4D20471AABDAB5B862CBD350B2654CBF7C06B7D59345D22B36F27
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
1139653
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
H:\progs\Compiling\notepad2-mod\bin\VS2017\Release_x86\Notepad2.pdb
comctl32
ImageList_Destroy
ord8
ImageList_Create
CreateStatusWindowW
InitCommonControlsEx
ImageList_AddMasked
shlwapi
StrCpyW
UrlEscapeW
StrNCatW
StrDupA
PathGetDriveNumberW
StrCmpNIW
PathRelativePathToW
PathIsPrefixW
PathUnExpandEnvStringsW
PathIsRootW
PathCanonicalizeW
PathIsRelativeW
PathAppendW
StrChrIW
PathFindExtensionW
PathCommonPrefixW
StrCmpNIA
StrStrW
PathStripToRootW
PathCompactPathExW
StrFormatByteSizeW
StrRChrW
PathRenameExtensionW
StrStrIW
StrCatBuffW
PathIsUNCW
StrChrW
StrTrimW
PathFileExistsW
SHAutoComplete
PathRemoveFileSpecW
PathFindFileNameW
PathQuoteSpacesW
StrTrimA
StrCatW
StrStrA
StrCatBuffA
StrCmpNA
UrlUnescapeW
StrChrA
StrStrIA
StrDupW
StrCmpW
StrCpyNW
StrCmpIW
StrChrIA
StrRetToBufW
PathMatchSpecW
PathIsDirectoryW
PathUnquoteSpacesW
kernel32
CloseHandle
CreateThread
ResetEvent
GetCurrentDirectoryW
LocalFree
lstrcpyW
lstrcmpiW
lstrcmpW
ReadFile
GetOEMCP
GetCPInfo
WriteFile
SetEndOfFile
lstrlenA
CreateFileW
lstrcmpA
lstrcatA
GetACP
IsValidCodePage
MultiByteToWideChar
GetLastError
GlobalSize
lstrcpyA
LocalSize
GetProcAddress
GlobalLock
GetFileSize
LCMapStringW
lstrcpynA
GetModuleHandleW
WideCharToMultiByte
lstrcmpiA
GetTickCount
GlobalUnlock
SizeofResource
GetLongPathNameW
GetCurrentProcess
ExpandEnvironmentStringsW
GetPrivateProfileSectionW
GetLocaleInfoW
GetModuleFileNameW
FreeResource
LockResource
LoadResource
FindResourceW
GetWindowsDirectoryW
WritePrivateProfileSectionW
MulDiv
GetStartupInfoW
CompareFileTime
FindFirstFileW
SearchPathW
GetCommandLineW
GlobalFree
FindClose
FindFirstChangeNotificationW
GetVersion
SetFileAttributesW
GetPrivateProfileStringW
FindCloseChangeNotification
LoadLibraryW
GetLocalTime
FindNextChangeNotification
SetCurrentDirectoryW
GetTimeFormatW
CreateProcessW
FreeLibrary
GetDateFormatW
ExitProcess
GetModuleFileNameA
GetStdHandle
RaiseException
RtlUnwind
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
CompareStringW
DecodePointer
EncodePointer
GetStringTypeW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LoadLibraryExW
QueryPerformanceCounter
DeleteCriticalSection
QueryPerformanceFrequency
LoadLibraryA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
Sleep
GetLocaleInfoA
WriteConsoleW
SetFilePointerEx
GlobalAlloc
lstrcatW
SetEvent
FormatMessageW
CreateEventW
ExitThread
GetFileAttributesW
LocalAlloc
SetErrorMode
WaitForSingleObject
GetPrivateProfileIntW
lstrcpynW
lstrlenW
WritePrivateProfileStringW
GetModuleHandleExW
HeapAlloc
HeapFree
HeapReAlloc
GetFileType
GetTimeZoneInformation
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FindFirstFileExA
FindNextFileA
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
GetProcessHeap
HeapSize
GetConsoleMode
FlushFileBuffers
GetConsoleCP
GetModuleHandleA
user32
InvalidateRect
ReleaseDC
IsCharLowerW
GetSystemMenu
GetKeyState
CharUpperW
CharLowerW
DestroyWindow
CreateWindowExW
wsprintfA
GetActiveWindow
OpenClipboard
GetCapture
CloseClipboard
IsCharLowerA
EmptyClipboard
GetSysColor
SetFocus
CharNextW
GetClipboardData
SetForegroundWindow
SystemParametersInfoW
CreateDialogIndirectParamW
SetRect
CharUpperBuffW
GetClientRect
GetMenuStringW
IsWindowEnabled
DialogBoxIndirectParamW
MapWindowPoints
GetMonitorInfoW
SetWindowTextW
GetSystemMetrics
SetActiveWindow
MonitorFromRect
SetWindowPos
GetDC
GetMenu
DestroyCursor
SetCapture
GetCaretBlinkTime
GetMessageW
DefWindowProcW
LoadMenuW
ShowWindowAsync
CheckMenuRadioItem
LoadCursorW
InsertMenuW
SetClipboardData
IsWindowVisible
IsClipboardFormatAvailable
GetSysColorBrush
CharLowerA
IsCharAlphaNumericA
ReleaseCapture
SetCursorPos
ChildWindowFromPoint
IsCharUpperW
GetCursorPos
GetParent
GetWindowLongW
GetWindowTextLengthW
PostMessageW
GetFocus
CheckRadioButton
GetPropW
MessageBoxExW
SendMessageW
EndDialog
RemovePropW
MessageBeep
LoadStringW
ShowWindow
BeginDeferWindowPos
DispatchMessageW
wvsprintfW
CharPrevW
PeekMessageW
SetDlgItemTextW
GetDlgItemTextW
SendDlgItemMessageW
MessageBoxIndirectW
IsDlgButtonChecked
IsCharAlphaNumericW
SetPropW
TranslateMessage
LoadIconW
EndDeferWindowPos
wsprintfW
GetDlgItemInt
SetWindowLongW
GetDlgItem
CheckDlgButton
SetDlgItemInt
LoadImageW
EnableWindow
EqualRect
SetClipboardViewer
MessageBoxW
CopyImage
ShowOwnedPopups
ScreenToClient
UnregisterClassW
GetWindowPlacement
LoadAcceleratorsW
TrackPopupMenu
GetSubMenu
IsWindow
OffsetRect
SetTimer
IsDialogMessageW
ChangeClipboardChain
GetDlgCtrlID
ClientToScreen
IsChild
RegisterClassW
SetWindowPlacement
CountClipboardFormats
GetDoubleClickTime
SetMenuDefaultItem
GetForegroundWindow
EnumWindows
DestroyMenu
IntersectRect
TranslateAcceleratorW
GetClassNameW
TrackPopupMenuEx
EndPaint
BeginPaint
PtInRect
ShowCaret
AppendMenuA
DestroyCaret
GetMessageTime
GetKeyboardLayout
TrackMouseEvent
CreateCaret
SetCaretPos
RegisterClassExW
MsgWaitForMultipleObjects
GetScrollInfo
NotifyWinEvent
HideCaret
GetUpdateRgn
RegisterClipboardFormatW
SetScrollInfo
DrawTextW
SystemParametersInfoA
FrameRect
CreateIconIndirect
DrawTextA
CreatePopupMenu
GetIconInfo
FillRect
InflateRect
MonitorFromPoint
CallWindowProcW
GetWindowRect
IsZoomed
KillTimer
PostQuitMessage
EnableMenuItem
RegisterWindowMessageW
UpdateWindow
IsIconic
DrawAnimatedRects
DeferWindowPos
GetMenuState
AdjustWindowRectEx
SetCursor
FindWindowExW
CheckMenuItem
gdi32
GetTextExtentExPointA
CreatePatternBrush
Rectangle
Polygon
Ellipse
CreateSolidBrush
RoundRect
IntersectClipRect
CreateRectRgn
CreateBitmap
CombineRgn
GetStockObject
SetBkMode
SetTextColor
BitBlt
TranslateCharsetInfo
SetMapMode
StretchBlt
GetDeviceCaps
EnumFontsW
EndPage
DPtoLP
StartDocW
ExtTextOutW
SetTextAlign
SetBkColor
MoveToEx
CreatePen
LineTo
DeleteDC
GetTextMetricsW
CreateFontW
EndDoc
StartPage
GetTextExtentExPointW
CreateCompatibleDC
GetTextExtentPoint32A
CreateDIBSection
ExtTextOutA
GetTextExtentPoint32W
CreateCompatibleBitmap
GetNearestColor
GetObjectW
DeleteObject
SelectObject
CreateFontIndirectW
comdlg32
ChooseFontW
PageSetupDlgW
PrintDlgW
GetSaveFileNameW
GetOpenFileNameW
ChooseColorW
advapi32
GetTokenInformation
OpenProcessToken
IsTextUnicode
shell32
ShellExecuteW
SHBrowseForFolderW
ShellExecuteExW
SHGetPathFromIDListW
SHGetDataFromIDListW
SHGetDesktopFolder
ord180
SHAppBarMessage
SHGetFolderPathW
SHAddToRecentDocs
SHGetSpecialFolderPathW
DragQueryFileW
Shell_NotifyIconW
SHCreateDirectoryExW
DragAcceptFiles
DragFinish
SHGetFileInfoW
ole32
OleInitialize
OleUninitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
DoDragDrop
RegisterDragDrop
RevokeDragDrop
CLSIDFromProgID
CoUninitialize
CoInitialize
imm32
ImmNotifyIME
ImmSetCompositionStringW
ImmEscapeW
ImmGetCompositionStringW
ImmSetCompositionWindow
ImmSetCompositionFontW
ImmReleaseContext
ImmGetContext
ImmSetCandidateWindow
msimg32
AlphaBlend
oleaut32
SysFreeString
SysAllocString
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
160KB
Virtual Size
194KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
103KB
Virtual Size
103KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
46KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=15, id=241, version=40116,
count=149, id=243, version=40116,
count=30, id=242, version=40116,
count=24, id=259, version=24723,
count=54, id=261, version=24723,
count=34, id=260, version=24723,
count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=25, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=481, id=1, productName=Unmarked objects,
count=78, id=264, version=25019,
count=1, id=255, version=25019,
count=1, id=258, version=25019,
Notepad2-mod/32-bit/Notepad2.txt
- SHA256 1e8387dd6a1ea3740267c8c2ab5bf893f44c2ceb3018fcd0f0e045b727ff5b49
- MD5 af5e52f6decb53b8429342b0549d7435
- SHA1 0dc902122d717aec2aff9e29f01bbc289e3b408d
- SHA512 b90eb2a2b4938d058ce1f7f13970e7d02ff5c7bb47b464d56d1b68dfc5595a8822770f026970ca82a4b9921f3617a168b868ab7871e7db095327bf0720c727b9
- SSDEEP 768:P3Rj3MEvqZQ1wFSuxYrrELyM7LLUcMk9+wRuOYJT9G6:fSECO/CV7LLUcMk1RuOYR
- TLSH T17B03E623694542A655F308435B63A612F7324B7FE71722867CFC890CA736076A377AEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Notepad2-mod/32-bit/Notepad2_EN.exe
- IMPHASH 5aec183813a5de82610c6ec1e6e0912f
- SHA256 7f083b3ec1c8534f7f9339aaa7f9cc8a4f2b9000f33e4f59b6099734fea629a7
- MD5 df0085f7decd734f802edbbb5183ab3a
- SHA1 23db5e9f80a6b62c0a06e3188a69d41c24a41249
- SHA512 69aa70e63172cbb4b2abe0e3d9f902215f5e08383c80f4ecc009a0157c3d43270e3f326e111197308f98c196f1643e9a0ff7dd94787b79f92e25bb3cdd40b3fd
- SSDEEP 24576:NIntnK8+xBuKhpSK438pckG0WY9gxdvAp2ei9tige/5ZZ0RQn/+chX/g/ER26yv:NInt6Z0yn+2VbKjFaUl3Qki
- TLSH T1F0759D11BA82D033E4E20571AABDAB5B852CBD311B2594CBF7C06B7D59306D22E35F27
- MD5 SHA1 SHA512 SSDEEP TLSH
PE Signature issue
Digest
61:ae:1b:a5:b2:72:83:0a:56:ca:d9:6f:dc:4d:5a:80:62:d0:28:23:ec:c6:b2:5e:77:e0:18:aa:b2:15:e7:fe
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Fotis Zafiropoulos,O=Fotis Zafiropoulos,L=ΚΑΣΤΡΙΤΣΙ,ST=ΠΑΤΡΑΣ,C=GR
Chains
Oct 7, 2026
CN=Fotis Zafiropoulos,O=Fotis Zafiropoulos,L=ΚΑΣΤΡΙΤΣΙ,ST=ΠΑΤΡΑΣ,C=GR
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
f4:97:40:29:ff:f5:43:1f:46:48:6f:b3:c9:2f:44:88:a7:bb:70:40
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Fotis Zafiropoulos,O=Fotis Zafiropoulos,L=ΚΑΣΤΡΙΤΣΙ,ST=ΠΑΤΡΑΣ,C=GR
Chains
Aug 6, 2017
CN=Fotis Zafiropoulos,O=Fotis Zafiropoulos,L=ΚΑΣΤΡΙΤΣΙ,ST=ΠΑΤΡΑΣ,C=GR
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Fotis Zafiropoulos,O=Fotis Zafiropoulos,L=ΚΑΣΤΡΙΤΣΙ,ST=ΠΑΤΡΑΣ,C=GR
Serial Number
0d:17:31:51:d3:db:31:7e:05:0e:fc:22:c5:b3:a0:dd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2016 - Jan 29, 2019
Subject
CN=DigiCert Timestamp Responder,O=DigiCert,C=US
Serial Number
03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Issuer
CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 22, 2014 - Oct 22, 2024
Subject
CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2021
Subject
CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US
Serial Number
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 4, 2017 - Jan 18, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
1
Major OS version
5
Entry point
1139653
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
H:\progs\Compiling\notepad2-mod\bin\VS2017\Release_x86\Notepad2.pdb
comctl32
ImageList_Destroy
ord8
ImageList_Create
CreateStatusWindowW
InitCommonControlsEx
ImageList_AddMasked
shlwapi
StrCpyW
UrlEscapeW
StrNCatW
StrDupA
PathGetDriveNumberW
StrCmpNIW
PathRelativePathToW
PathIsPrefixW
PathUnExpandEnvStringsW
PathIsRootW
PathCanonicalizeW
PathIsRelativeW
PathAppendW
StrChrIW
PathFindExtensionW
PathCommonPrefixW
StrCmpNIA
StrStrW
PathStripToRootW
PathCompactPathExW
StrFormatByteSizeW
StrRChrW
PathRenameExtensionW
StrStrIW
StrCatBuffW
PathIsUNCW
StrChrW
StrTrimW
PathFileExistsW
SHAutoComplete
PathRemoveFileSpecW
PathFindFileNameW
PathQuoteSpacesW
StrTrimA
StrCatW
StrStrA
StrCatBuffA
StrCmpNA
UrlUnescapeW
StrChrA
StrStrIA
StrDupW
StrCmpW
StrCpyNW
StrCmpIW
StrChrIA
StrRetToBufW
PathMatchSpecW
PathIsDirectoryW
PathUnquoteSpacesW
kernel32
CloseHandle
CreateThread
ResetEvent
GetCurrentDirectoryW
LocalFree
lstrcpyW
lstrcmpiW
lstrcmpW
ReadFile
GetOEMCP
GetCPInfo
WriteFile
SetEndOfFile
lstrlenA
CreateFileW
lstrcmpA
lstrcatA
GetACP
IsValidCodePage
MultiByteToWideChar
GetLastError
GlobalSize
lstrcpyA
LocalSize
GetProcAddress
GlobalLock
GetFileSize
LCMapStringW
lstrcpynA
GetModuleHandleW
WideCharToMultiByte
lstrcmpiA
GetTickCount
GlobalUnlock
SizeofResource
GetLongPathNameW
GetCurrentProcess
ExpandEnvironmentStringsW
GetPrivateProfileSectionW
GetLocaleInfoW
GetModuleFileNameW
FreeResource
LockResource
LoadResource
FindResourceW
GetWindowsDirectoryW
WritePrivateProfileSectionW
MulDiv
GetStartupInfoW
CompareFileTime
FindFirstFileW
SearchPathW
GetCommandLineW
GlobalFree
FindClose
FindFirstChangeNotificationW
GetVersion
SetFileAttributesW
GetPrivateProfileStringW
FindCloseChangeNotification
LoadLibraryW
GetLocalTime
FindNextChangeNotification
SetCurrentDirectoryW
GetTimeFormatW
CreateProcessW
FreeLibrary
GetDateFormatW
ExitProcess
GetModuleFileNameA
GetStdHandle
RaiseException
RtlUnwind
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
CompareStringW
DecodePointer
EncodePointer
GetStringTypeW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LoadLibraryExW
QueryPerformanceCounter
DeleteCriticalSection
QueryPerformanceFrequency
LoadLibraryA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
Sleep
GetLocaleInfoA
WriteConsoleW
SetFilePointerEx
GlobalAlloc
lstrcatW
SetEvent
FormatMessageW
CreateEventW
ExitThread
GetFileAttributesW
LocalAlloc
SetErrorMode
WaitForSingleObject
GetPrivateProfileIntW
lstrcpynW
lstrlenW
WritePrivateProfileStringW
GetModuleHandleExW
HeapAlloc
HeapFree
HeapReAlloc
GetFileType
GetTimeZoneInformation
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FindFirstFileExA
FindNextFileA
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
GetProcessHeap
HeapSize
GetConsoleMode
FlushFileBuffers
GetConsoleCP
GetModuleHandleA
user32
InvalidateRect
ReleaseDC
IsCharLowerW
GetSystemMenu
GetKeyState
CharUpperW
CharLowerW
DestroyWindow
CreateWindowExW
wsprintfA
GetActiveWindow
OpenClipboard
GetCapture
CloseClipboard
IsCharLowerA
EmptyClipboard
GetSysColor
SetFocus
CharNextW
GetClipboardData
SetForegroundWindow
SystemParametersInfoW
CreateDialogIndirectParamW
SetRect
CharUpperBuffW
GetClientRect
GetMenuStringW
IsWindowEnabled
DialogBoxIndirectParamW
MapWindowPoints
GetMonitorInfoW
SetWindowTextW
GetSystemMetrics
SetActiveWindow
MonitorFromRect
SetWindowPos
GetDC
GetMenu
DestroyCursor
SetCapture
GetCaretBlinkTime
GetMessageW
DefWindowProcW
LoadMenuW
ShowWindowAsync
CheckMenuRadioItem
LoadCursorW
InsertMenuW
SetClipboardData
IsWindowVisible
IsClipboardFormatAvailable
GetSysColorBrush
CharLowerA
IsCharAlphaNumericA
ReleaseCapture
SetCursorPos
ChildWindowFromPoint
IsCharUpperW
GetCursorPos
GetParent
GetWindowLongW
GetWindowTextLengthW
PostMessageW
GetFocus
CheckRadioButton
GetPropW
MessageBoxExW
SendMessageW
EndDialog
RemovePropW
MessageBeep
LoadStringW
ShowWindow
BeginDeferWindowPos
DispatchMessageW
wvsprintfW
CharPrevW
PeekMessageW
SetDlgItemTextW
GetDlgItemTextW
SendDlgItemMessageW
MessageBoxIndirectW
IsDlgButtonChecked
IsCharAlphaNumericW
SetPropW
TranslateMessage
LoadIconW
EndDeferWindowPos
wsprintfW
GetDlgItemInt
SetWindowLongW
GetDlgItem
CheckDlgButton
SetDlgItemInt
LoadImageW
EnableWindow
EqualRect
SetClipboardViewer
MessageBoxW
CopyImage
ShowOwnedPopups
ScreenToClient
UnregisterClassW
GetWindowPlacement
LoadAcceleratorsW
TrackPopupMenu
GetSubMenu
IsWindow
OffsetRect
SetTimer
IsDialogMessageW
ChangeClipboardChain
GetDlgCtrlID
ClientToScreen
IsChild
RegisterClassW
SetWindowPlacement
CountClipboardFormats
GetDoubleClickTime
SetMenuDefaultItem
GetForegroundWindow
EnumWindows
DestroyMenu
IntersectRect
TranslateAcceleratorW
GetClassNameW
TrackPopupMenuEx
EndPaint
BeginPaint
PtInRect
ShowCaret
AppendMenuA
DestroyCaret
GetMessageTime
GetKeyboardLayout
TrackMouseEvent
CreateCaret
SetCaretPos
RegisterClassExW
MsgWaitForMultipleObjects
GetScrollInfo
NotifyWinEvent
HideCaret
GetUpdateRgn
RegisterClipboardFormatW
SetScrollInfo
DrawTextW
SystemParametersInfoA
FrameRect
CreateIconIndirect
DrawTextA
CreatePopupMenu
GetIconInfo
FillRect
InflateRect
MonitorFromPoint
CallWindowProcW
GetWindowRect
IsZoomed
KillTimer
PostQuitMessage
EnableMenuItem
RegisterWindowMessageW
UpdateWindow
IsIconic
DrawAnimatedRects
DeferWindowPos
GetMenuState
AdjustWindowRectEx
SetCursor
FindWindowExW
CheckMenuItem
gdi32
GetTextExtentExPointA
CreatePatternBrush
Rectangle
Polygon
Ellipse
CreateSolidBrush
RoundRect
IntersectClipRect
CreateRectRgn
CreateBitmap
CombineRgn
GetStockObject
SetBkMode
SetTextColor
BitBlt
TranslateCharsetInfo
SetMapMode
StretchBlt
GetDeviceCaps
EnumFontsW
EndPage
DPtoLP
StartDocW
ExtTextOutW
SetTextAlign
SetBkColor
MoveToEx
CreatePen
LineTo
DeleteDC
GetTextMetricsW
CreateFontW
EndDoc
StartPage
GetTextExtentExPointW
CreateCompatibleDC
GetTextExtentPoint32A
CreateDIBSection
ExtTextOutA
GetTextExtentPoint32W
CreateCompatibleBitmap
GetNearestColor
GetObjectW
DeleteObject
SelectObject
CreateFontIndirectW
comdlg32
ChooseFontW
PageSetupDlgW
PrintDlgW
GetSaveFileNameW
GetOpenFileNameW
ChooseColorW
advapi32
GetTokenInformation
OpenProcessToken
IsTextUnicode
shell32
ShellExecuteW
SHBrowseForFolderW
ShellExecuteExW
SHGetPathFromIDListW
SHGetDataFromIDListW
SHGetDesktopFolder
ord180
SHAppBarMessage
SHGetFolderPathW
SHAddToRecentDocs
SHGetSpecialFolderPathW
DragQueryFileW
Shell_NotifyIconW
SHCreateDirectoryExW
DragAcceptFiles
DragFinish
SHGetFileInfoW
ole32
OleInitialize
OleUninitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
DoDragDrop
RegisterDragDrop
RevokeDragDrop
CLSIDFromProgID
CoUninitialize
CoInitialize
imm32
ImmNotifyIME
ImmSetCompositionStringW
ImmEscapeW
ImmGetCompositionStringW
ImmSetCompositionWindow
ImmSetCompositionFontW
ImmReleaseContext
ImmGetContext
ImmSetCandidateWindow
msimg32
AlphaBlend
oleaut32
SysFreeString
SysAllocString
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
160KB
Virtual Size
194KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
116KB
Virtual Size
115KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
46KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=15, id=241, version=40116,
count=149, id=243, version=40116,
count=30, id=242, version=40116,
count=24, id=259, version=24723,
count=54, id=261, version=24723,
count=34, id=260, version=24723,
count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=25, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=481, id=1, productName=Unmarked objects,
count=78, id=264, version=25019,
count=1, id=255, version=25019,
count=1, id=258, version=25019,
Notepad2-mod/32-bit/Readme-mod.txt
- SHA256 de049c952d59ac04ec2d1e9c40decdcfe685d9fb17ba936d81389992b2619c2b
- MD5 51a8ee2fe7e443c5e805d60b85c2a7d6
- SHA1 c2ea850922b755fc10a826238bf12094eacb93f0
- SHA512 763ec7a452ab2025a15c3598fea04034ea68effcd4663376df1e9c8c6b19c23164de456b7b46e6641cc173d8edb1e6d77539e7cc38b06d0fe230f1a454bbc077
- TLSH T19621869E760C634FDEB547E223AE7111AB2312F4B58209B6F41C49CC13011BAD23ED1C
- MD5 SHA1 SHA512 TLSH
Notepad2-mod/32-bit/Readme_CN.txt
- SHA256 90ba7a10df8e6983853b8fe1556c53c788f5f738bcde7c5c2619a657c7b3f549
- MD5 e1c4768e183d8233c251492abb3a8674
- SHA1 56505c7450897dd93f3090bbe5398eca44441e6b
- SHA512 a3171fa88f7f9c65f0e9222bafab664dd591acfc2c5b987c978dacd7c7344cb312008046a420d12cb73a3beb91b13d1a792d734af9209657dca2e0584048c861
- TLSH T14641035792F65213EE3F8BC29EC8025A4B89C0E9AD9C3FF7D5BC0C7810285C258358A2
- MD5 SHA1 SHA512 TLSH
Notepad2-mod/64-bit/!)替换记事本.bat
- SHA256 8d72963998e3dbd0bdd2964d69e1369bc0dbadffdc4f413bc660504b22821bd6
- MD5 eac1036b0c0d891eec82d8fcedf7d1c0
- SHA1 320280f8cfca18d66602c1a69c6fbb887b6946d7
- SHA512 69a58caefd53295bce4764ffacc9e42ceef8cc427498a4d19900294151a842616759bfdf0f0b3b9d2fda17e8186ac4e6185d9ed61db09f2d514d2dbaa0b20111
- TLSH T1CDE026843A314102D2F54C80897B541DBE37E0E7A2121F557492E8B8692FBE1B33E6EA
- MD5 SHA1 SHA512 TLSH
Notepad2-mod/64-bit/!)还原记事本.bat
- SHA256 237a91f5aea075311fec67ba50da15dd23df8e34b13ee9cacd161195c8a38da8
- MD5 fd4c7d0f3132c018d16c6117bc834740
- SHA1 3aeb7c49521ddb2119e67c72fa270f889494ddba
- SHA512 3d5a2f46bd75691a54c6aaa02bc4f9563f4b878692442b84cfab3f2ecff9e4f9f0389d1eab874f9d4e14a612475699e0a095f4b3df86e5bf239c206c416b2778
- TLSH T102D0C2883B22010192F1884099764418BE3651E762125E01B097D8A4A926BE5B27E5AB
- MD5 SHA1 SHA512 TLSH
Notepad2-mod/64-bit/License.txt
- SHA256 c1cf2c653df1a9f11a35081694fc13feb9d8faa6791195ca5c633ce006270ed6
- MD5 3f7268de02a0027c1973cea3e43056c8
- SHA1 dd2ba9e4b2376f86fe5b3fb71a86ca7822bce26a
- SHA512 8e1ad5bd0ac065ba5a20ad40c6eb69f2024009ec3558f3922450e25c731d0a12d31a1336cba1e37e90865a58178e118a0ce88f2ae0a9bb3caa78f43623b60531
- TLSH T15C31985741840FA35AF117957626E9C4F09DD03C3B276E01286EF3A8537B03EE677148
- MD5 SHA1 SHA512 TLSH
Notepad2-mod/64-bit/Notepad2.exe
- IMPHASH c3d1385a8f588bad56cb559a9fe747c4
- SHA256 d01dff781efd3c54d38f8c7c590f268088774b973811e2fa6dae81cbe3cc505b
- MD5 26f9b726222405aed58019a3770347b4
- SHA1 2e780d0c39fe4b297e1c9076991c03b79c9f980a
- SHA512 5c6b5b14556e01cc7c4374c33eacb75b7b27cb330049099c7adf8f2a9e42dbf11f9ff1bbbf86e5ea1243b74ae012a1a10a272f79eea7ef816cd636ff6690ca4f
- SSDEEP 24576:3W3tHK8+xBuKhpSK438pckG0WY9gxdvAp2ei9tige/5J5KdbMBiF0RYfjwmKCc4k:G3tK5KGuGYfjDuScm/PCZqZR/6AMOn
- TLSH T11E959E46B7A410E9D0A7C178CAA79643E7717C140B618FEF5694839E6F33AE14F3A312
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
1331988
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
H:\progs\Compiling\notepad2-mod\bin\VS2017\Release_x64\Notepad2.pdb
comctl32
ImageList_Destroy
ord8
ImageList_Create
CreateStatusWindowW
InitCommonControlsEx
ImageList_AddMasked
shlwapi
StrCpyW
UrlEscapeW
StrNCatW
StrDupA
PathGetDriveNumberW
StrCmpNIW
PathRelativePathToW
PathIsPrefixW
PathUnExpandEnvStringsW
PathIsRootW
PathCanonicalizeW
PathIsRelativeW
PathAppendW
StrChrIW
PathFindExtensionW
PathCommonPrefixW
StrCmpNIA
StrStrW
PathStripToRootW
PathCompactPathExW
StrFormatByteSizeW
StrRChrW
PathRenameExtensionW
StrStrIW
StrCatBuffW
PathIsUNCW
StrChrW
StrTrimW
PathFileExistsW
SHAutoComplete
PathRemoveFileSpecW
PathFindFileNameW
PathQuoteSpacesW
StrTrimA
StrCatW
StrStrA
StrCatBuffA
StrCmpNA
UrlUnescapeW
StrChrA
StrStrIA
StrDupW
StrCmpW
StrCpyNW
StrCmpIW
StrChrIA
StrRetToBufW
PathMatchSpecW
PathIsDirectoryW
PathUnquoteSpacesW
kernel32
CloseHandle
CreateThread
ResetEvent
GetCurrentDirectoryW
LocalFree
lstrcpyW
lstrcmpiW
lstrcmpW
ReadFile
GetOEMCP
GetCPInfo
WriteFile
SetEndOfFile
lstrlenA
CreateFileW
lstrcmpA
lstrcatA
GetACP
IsValidCodePage
MultiByteToWideChar
GetLastError
GlobalSize
lstrcpyA
LocalSize
GetProcAddress
GlobalLock
GetFileSize
LCMapStringW
lstrcpynA
GetModuleHandleW
WideCharToMultiByte
lstrcmpiA
GetTickCount
GlobalUnlock
SizeofResource
GetLongPathNameW
GetCurrentProcess
ExpandEnvironmentStringsW
GetPrivateProfileSectionW
GetLocaleInfoW
GetModuleHandleA
FreeResource
GetModuleFileNameW
LoadResource
FindResourceW
GetWindowsDirectoryW
WritePrivateProfileSectionW
MulDiv
GetStartupInfoW
CompareFileTime
FindFirstFileW
SearchPathW
GetCommandLineW
SetErrorMode
FindClose
GlobalFree
GetVersion
SetFileAttributesW
GetPrivateProfileStringW
FindCloseChangeNotification
LoadLibraryW
GetLocalTime
FindNextChangeNotification
SetCurrentDirectoryW
GetTimeFormatW
CreateProcessW
FreeLibrary
GetDateFormatW
ExitProcess
GetModuleFileNameA
GetStdHandle
RaiseException
RtlPcToFileHeader
RtlUnwindEx
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
CompareStringW
DecodePointer
EncodePointer
GetStringTypeW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LoadLibraryExW
QueryPerformanceCounter
DeleteCriticalSection
QueryPerformanceFrequency
LoadLibraryA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
Sleep
GetLocaleInfoA
WriteConsoleW
SetFilePointerEx
GlobalAlloc
lstrcatW
SetEvent
FormatMessageW
CreateEventW
ExitThread
GetFileAttributesW
LocalAlloc
FindFirstChangeNotificationW
WaitForSingleObject
GetPrivateProfileIntW
lstrcpynW
lstrlenW
WritePrivateProfileStringW
GetModuleHandleExW
HeapAlloc
HeapFree
HeapReAlloc
GetFileType
GetTimeZoneInformation
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FindFirstFileExA
FindNextFileA
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
GetProcessHeap
HeapSize
GetConsoleMode
FlushFileBuffers
GetConsoleCP
LockResource
user32
InvalidateRect
ReleaseDC
GetWindowLongW
IsCharLowerW
GetSystemMenu
GetKeyState
CharUpperW
CharLowerW
DestroyWindow
CreateWindowExW
wsprintfA
GetActiveWindow
OpenClipboard
GetCapture
CloseClipboard
IsCharLowerA
EmptyClipboard
SetForegroundWindow
SystemParametersInfoW
CreateDialogIndirectParamW
SetRect
CharUpperBuffW
GetClientRect
GetMenuStringW
IsWindowEnabled
DialogBoxIndirectParamW
MapWindowPoints
GetMonitorInfoW
SetWindowTextW
GetSystemMetrics
SetActiveWindow
MonitorFromRect
SetWindowPos
GetDC
GetMenu
GetWindowRect
FindWindowExW
AdjustWindowRectEx
DestroyCursor
SetCapture
GetCaretBlinkTime
GetMessageW
DefWindowProcW
GetSysColor
SetFocus
CharNextW
GetClipboardData
LoadCursorW
InsertMenuW
SetClipboardData
LoadMenuW
IsClipboardFormatAvailable
GetSysColorBrush
CharLowerA
IsCharAlphaNumericA
ReleaseCapture
SetCursorPos
ChildWindowFromPoint
IsCharUpperW
GetCursorPos
GetParent
GetWindowTextLengthW
PostMessageW
GetFocus
CheckRadioButton
GetPropW
MessageBoxExW
SetWindowLongPtrW
SendMessageW
EndDialog
RemovePropW
MessageBeep
GetWindowLongPtrW
LoadStringW
ShowWindow
BeginDeferWindowPos
DispatchMessageW
wvsprintfW
CharPrevW
PeekMessageW
SetDlgItemTextW
GetDlgItemTextW
SendDlgItemMessageW
MessageBoxIndirectW
IsDlgButtonChecked
IsCharAlphaNumericW
SetPropW
TranslateMessage
LoadIconW
EndDeferWindowPos
wsprintfW
GetDlgItemInt
GetDlgItem
CheckDlgButton
SetDlgItemInt
LoadImageW
EnableWindow
ShowWindowAsync
CheckMenuRadioItem
IsWindowVisible
EqualRect
SetClipboardViewer
MessageBoxW
CopyImage
ShowOwnedPopups
ScreenToClient
UnregisterClassW
GetWindowPlacement
LoadAcceleratorsW
TrackPopupMenu
GetSubMenu
IsWindow
OffsetRect
SetTimer
IsDialogMessageW
ChangeClipboardChain
GetDlgCtrlID
ClientToScreen
IsChild
RegisterClassW
SetWindowPlacement
CountClipboardFormats
GetDoubleClickTime
SetMenuDefaultItem
GetForegroundWindow
EnumWindows
DestroyMenu
IntersectRect
EndPaint
BeginPaint
PtInRect
ShowCaret
AppendMenuA
SetWindowLongW
DestroyCaret
GetMessageTime
GetKeyboardLayout
TrackMouseEvent
CreateCaret
SetCaretPos
RegisterClassExW
MsgWaitForMultipleObjects
GetScrollInfo
NotifyWinEvent
HideCaret
GetUpdateRgn
RegisterClipboardFormatW
SetScrollInfo
DrawTextW
SystemParametersInfoA
FrameRect
CreateIconIndirect
DrawTextA
CreatePopupMenu
GetIconInfo
FillRect
InflateRect
MonitorFromPoint
CallWindowProcW
TranslateAcceleratorW
GetMenuState
TrackPopupMenuEx
CheckMenuItem
IsZoomed
KillTimer
PostQuitMessage
EnableMenuItem
RegisterWindowMessageW
UpdateWindow
IsIconic
DrawAnimatedRects
SetCursor
DeferWindowPos
GetClassNameW
gdi32
GetTextExtentExPointA
CreatePatternBrush
Rectangle
Polygon
Ellipse
CreateSolidBrush
RoundRect
IntersectClipRect
CreateRectRgn
CreateBitmap
CombineRgn
GetStockObject
SetBkMode
SetTextColor
BitBlt
TranslateCharsetInfo
SetMapMode
StretchBlt
GetDeviceCaps
EnumFontsW
EndPage
DPtoLP
StartDocW
ExtTextOutW
SetTextAlign
SetBkColor
MoveToEx
CreatePen
LineTo
DeleteDC
GetTextMetricsW
CreateFontW
EndDoc
StartPage
GetTextExtentExPointW
CreateCompatibleDC
GetTextExtentPoint32A
CreateDIBSection
ExtTextOutA
GetTextExtentPoint32W
CreateCompatibleBitmap
GetNearestColor
GetObjectW
DeleteObject
SelectObject
CreateFontIndirectW
comdlg32
ChooseFontW
PageSetupDlgW
PrintDlgW
GetSaveFileNameW
GetOpenFileNameW
ChooseColorW
advapi32
GetTokenInformation
OpenProcessToken
IsTextUnicode
shell32
ShellExecuteW
SHBrowseForFolderW
ShellExecuteExW
SHGetPathFromIDListW
SHGetDataFromIDListW
SHGetDesktopFolder
ord180
SHAppBarMessage
SHGetFolderPathW
SHAddToRecentDocs
SHGetSpecialFolderPathW
DragQueryFileW
Shell_NotifyIconW
SHCreateDirectoryExW
DragAcceptFiles
DragFinish
SHGetFileInfoW
ole32
OleInitialize
OleUninitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
DoDragDrop
RegisterDragDrop
RevokeDragDrop
CLSIDFromProgID
CoUninitialize
CoInitialize
imm32
ImmNotifyIME
ImmSetCompositionStringW
ImmEscapeW
ImmGetCompositionStringW
ImmSetCompositionWindow
ImmSetCompositionFontW
ImmReleaseContext
ImmGetContext
ImmSetCandidateWindow
msimg32
AlphaBlend
oleaut32
SysFreeString
SysAllocString
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
170KB
Virtual Size
207KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
50KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
103KB
Virtual Size
103KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=241, version=40116,
count=149, id=243, version=40116,
count=28, id=242, version=40116,
count=8, id=259, version=24723,
count=53, id=261, version=24723,
count=37, id=260, version=24723,
count=4, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=135, version=30729,
count=25, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=487, id=1, productName=Unmarked objects,
count=78, id=264, version=25019,
count=1, id=255, version=25019,
count=1, id=258, version=25019,
Notepad2-mod/64-bit/Notepad2.txt
- SHA256 1e8387dd6a1ea3740267c8c2ab5bf893f44c2ceb3018fcd0f0e045b727ff5b49
- MD5 af5e52f6decb53b8429342b0549d7435
- SHA1 0dc902122d717aec2aff9e29f01bbc289e3b408d
- SHA512 b90eb2a2b4938d058ce1f7f13970e7d02ff5c7bb47b464d56d1b68dfc5595a8822770f026970ca82a4b9921f3617a168b868ab7871e7db095327bf0720c727b9
- SSDEEP 768:P3Rj3MEvqZQ1wFSuxYrrELyM7LLUcMk9+wRuOYJT9G6:fSECO/CV7LLUcMk1RuOYR
- TLSH T17B03E623694542A655F308435B63A612F7324B7FE71722867CFC890CA736076A377AEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Notepad2-mod/64-bit/Notepad2_EN.exe
- IMPHASH c3d1385a8f588bad56cb559a9fe747c4
- SHA256 52d427d24308e95cd20e23c8b980a3f874f74d6ab0ef31627e482b1011d55163
- MD5 cd273ef20ca42c731d641899aed74240
- SHA1 2aa578c73c18a753b2dd732998b3b9f249cf01e7
- SHA512 97e2d2c8d4d611bcd5fc9887c065af7a589ced401f78ce2f04f785a2277c0b5874f461a02fd5c1dbdba38196a9f040d10f015f02d5474b85c0ad4e2ecd281033
- SSDEEP 24576:IW3tHK8+xBuKhpSK438pckG0WY9gxdvAp2ei9tige/5J5KdbMBiF0RYfjwmKCc4m:X3tK5KGuGYfjDuScm/PCZqZR/6AMOn0
- TLSH T14D957D46B7E410E9E0A7C1788AB69643D7717C541B318EDF4694839E6F33AE14F3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
PE Signature issue
Digest
19:c7:3e:e2:b4:91:1b:21:e1:52:08:52:de:be:c9:87:bf:60:b1:c0:5e:00:c2:95:37:51:e4:c5:3e:d9:67:8d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Fotis Zafiropoulos,O=Fotis Zafiropoulos,L=ΚΑΣΤΡΙΤΣΙ,ST=ΠΑΤΡΑΣ,C=GR
Chains
Oct 7, 2026
CN=Fotis Zafiropoulos,O=Fotis Zafiropoulos,L=ΚΑΣΤΡΙΤΣΙ,ST=ΠΑΤΡΑΣ,C=GR
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
ab:c5:c6:a0:de:55:d4:e8:41:63:41:aa:69:e3:fa:bd:be:43:73:18
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Fotis Zafiropoulos,O=Fotis Zafiropoulos,L=ΚΑΣΤΡΙΤΣΙ,ST=ΠΑΤΡΑΣ,C=GR
Chains
Aug 6, 2017
CN=Fotis Zafiropoulos,O=Fotis Zafiropoulos,L=ΚΑΣΤΡΙΤΣΙ,ST=ΠΑΤΡΑΣ,C=GR
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Fotis Zafiropoulos,O=Fotis Zafiropoulos,L=ΚΑΣΤΡΙΤΣΙ,ST=ΠΑΤΡΑΣ,C=GR
Serial Number
0d:17:31:51:d3:db:31:7e:05:0e:fc:22:c5:b3:a0:dd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2016 - Jan 29, 2019
Subject
CN=DigiCert Timestamp Responder,O=DigiCert,C=US
Serial Number
03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Issuer
CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 22, 2014 - Oct 22, 2024
Subject
CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2021
Subject
CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US
Serial Number
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 4, 2017 - Jan 18, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
2
Major OS version
5
Entry point
1331988
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
H:\progs\Compiling\notepad2-mod\bin\VS2017\Release_x64\Notepad2.pdb
comctl32
ImageList_Destroy
ord8
ImageList_Create
CreateStatusWindowW
InitCommonControlsEx
ImageList_AddMasked
shlwapi
StrCpyW
UrlEscapeW
StrNCatW
StrDupA
PathGetDriveNumberW
StrCmpNIW
PathRelativePathToW
PathIsPrefixW
PathUnExpandEnvStringsW
PathIsRootW
PathCanonicalizeW
PathIsRelativeW
PathAppendW
StrChrIW
PathFindExtensionW
PathCommonPrefixW
StrCmpNIA
StrStrW
PathStripToRootW
PathCompactPathExW
StrFormatByteSizeW
StrRChrW
PathRenameExtensionW
StrStrIW
StrCatBuffW
PathIsUNCW
StrChrW
StrTrimW
PathFileExistsW
SHAutoComplete
PathRemoveFileSpecW
PathFindFileNameW
PathQuoteSpacesW
StrTrimA
StrCatW
StrStrA
StrCatBuffA
StrCmpNA
UrlUnescapeW
StrChrA
StrStrIA
StrDupW
StrCmpW
StrCpyNW
StrCmpIW
StrChrIA
StrRetToBufW
PathMatchSpecW
PathIsDirectoryW
PathUnquoteSpacesW
kernel32
CloseHandle
CreateThread
ResetEvent
GetCurrentDirectoryW
LocalFree
lstrcpyW
lstrcmpiW
lstrcmpW
ReadFile
GetOEMCP
GetCPInfo
WriteFile
SetEndOfFile
lstrlenA
CreateFileW
lstrcmpA
lstrcatA
GetACP
IsValidCodePage
MultiByteToWideChar
GetLastError
GlobalSize
lstrcpyA
LocalSize
GetProcAddress
GlobalLock
GetFileSize
LCMapStringW
lstrcpynA
GetModuleHandleW
WideCharToMultiByte
lstrcmpiA
GetTickCount
GlobalUnlock
SizeofResource
GetLongPathNameW
GetCurrentProcess
ExpandEnvironmentStringsW
GetPrivateProfileSectionW
GetLocaleInfoW
GetModuleHandleA
FreeResource
GetModuleFileNameW
LoadResource
FindResourceW
GetWindowsDirectoryW
WritePrivateProfileSectionW
MulDiv
GetStartupInfoW
CompareFileTime
FindFirstFileW
SearchPathW
GetCommandLineW
SetErrorMode
FindClose
GlobalFree
GetVersion
SetFileAttributesW
GetPrivateProfileStringW
FindCloseChangeNotification
LoadLibraryW
GetLocalTime
FindNextChangeNotification
SetCurrentDirectoryW
GetTimeFormatW
CreateProcessW
FreeLibrary
GetDateFormatW
ExitProcess
GetModuleFileNameA
GetStdHandle
RaiseException
RtlPcToFileHeader
RtlUnwindEx
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
CompareStringW
DecodePointer
EncodePointer
GetStringTypeW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LoadLibraryExW
QueryPerformanceCounter
DeleteCriticalSection
QueryPerformanceFrequency
LoadLibraryA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
Sleep
GetLocaleInfoA
WriteConsoleW
SetFilePointerEx
GlobalAlloc
lstrcatW
SetEvent
FormatMessageW
CreateEventW
ExitThread
GetFileAttributesW
LocalAlloc
FindFirstChangeNotificationW
WaitForSingleObject
GetPrivateProfileIntW
lstrcpynW
lstrlenW
WritePrivateProfileStringW
GetModuleHandleExW
HeapAlloc
HeapFree
HeapReAlloc
GetFileType
GetTimeZoneInformation
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FindFirstFileExA
FindNextFileA
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
GetProcessHeap
HeapSize
GetConsoleMode
FlushFileBuffers
GetConsoleCP
LockResource
user32
InvalidateRect
ReleaseDC
GetWindowLongW
IsCharLowerW
GetSystemMenu
GetKeyState
CharUpperW
CharLowerW
DestroyWindow
CreateWindowExW
wsprintfA
GetActiveWindow
OpenClipboard
GetCapture
CloseClipboard
IsCharLowerA
EmptyClipboard
SetForegroundWindow
SystemParametersInfoW
CreateDialogIndirectParamW
SetRect
CharUpperBuffW
GetClientRect
GetMenuStringW
IsWindowEnabled
DialogBoxIndirectParamW
MapWindowPoints
GetMonitorInfoW
SetWindowTextW
GetSystemMetrics
SetActiveWindow
MonitorFromRect
SetWindowPos
GetDC
GetMenu
GetWindowRect
FindWindowExW
AdjustWindowRectEx
DestroyCursor
SetCapture
GetCaretBlinkTime
GetMessageW
DefWindowProcW
GetSysColor
SetFocus
CharNextW
GetClipboardData
LoadCursorW
InsertMenuW
SetClipboardData
LoadMenuW
IsClipboardFormatAvailable
GetSysColorBrush
CharLowerA
IsCharAlphaNumericA
ReleaseCapture
SetCursorPos
ChildWindowFromPoint
IsCharUpperW
GetCursorPos
GetParent
GetWindowTextLengthW
PostMessageW
GetFocus
CheckRadioButton
GetPropW
MessageBoxExW
SetWindowLongPtrW
SendMessageW
EndDialog
RemovePropW
MessageBeep
GetWindowLongPtrW
LoadStringW
ShowWindow
BeginDeferWindowPos
DispatchMessageW
wvsprintfW
CharPrevW
PeekMessageW
SetDlgItemTextW
GetDlgItemTextW
SendDlgItemMessageW
MessageBoxIndirectW
IsDlgButtonChecked
IsCharAlphaNumericW
SetPropW
TranslateMessage
LoadIconW
EndDeferWindowPos
wsprintfW
GetDlgItemInt
GetDlgItem
CheckDlgButton
SetDlgItemInt
LoadImageW
EnableWindow
ShowWindowAsync
CheckMenuRadioItem
IsWindowVisible
EqualRect
SetClipboardViewer
MessageBoxW
CopyImage
ShowOwnedPopups
ScreenToClient
UnregisterClassW
GetWindowPlacement
LoadAcceleratorsW
TrackPopupMenu
GetSubMenu
IsWindow
OffsetRect
SetTimer
IsDialogMessageW
ChangeClipboardChain
GetDlgCtrlID
ClientToScreen
IsChild
RegisterClassW
SetWindowPlacement
CountClipboardFormats
GetDoubleClickTime
SetMenuDefaultItem
GetForegroundWindow
EnumWindows
DestroyMenu
IntersectRect
EndPaint
BeginPaint
PtInRect
ShowCaret
AppendMenuA
SetWindowLongW
DestroyCaret
GetMessageTime
GetKeyboardLayout
TrackMouseEvent
CreateCaret
SetCaretPos
RegisterClassExW
MsgWaitForMultipleObjects
GetScrollInfo
NotifyWinEvent
HideCaret
GetUpdateRgn
RegisterClipboardFormatW
SetScrollInfo
DrawTextW
SystemParametersInfoA
FrameRect
CreateIconIndirect
DrawTextA
CreatePopupMenu
GetIconInfo
FillRect
InflateRect
MonitorFromPoint
CallWindowProcW
TranslateAcceleratorW
GetMenuState
TrackPopupMenuEx
CheckMenuItem
IsZoomed
KillTimer
PostQuitMessage
EnableMenuItem
RegisterWindowMessageW
UpdateWindow
IsIconic
DrawAnimatedRects
SetCursor
DeferWindowPos
GetClassNameW
gdi32
GetTextExtentExPointA
CreatePatternBrush
Rectangle
Polygon
Ellipse
CreateSolidBrush
RoundRect
IntersectClipRect
CreateRectRgn
CreateBitmap
CombineRgn
GetStockObject
SetBkMode
SetTextColor
BitBlt
TranslateCharsetInfo
SetMapMode
StretchBlt
GetDeviceCaps
EnumFontsW
EndPage
DPtoLP
StartDocW
ExtTextOutW
SetTextAlign
SetBkColor
MoveToEx
CreatePen
LineTo
DeleteDC
GetTextMetricsW
CreateFontW
EndDoc
StartPage
GetTextExtentExPointW
CreateCompatibleDC
GetTextExtentPoint32A
CreateDIBSection
ExtTextOutA
GetTextExtentPoint32W
CreateCompatibleBitmap
GetNearestColor
GetObjectW
DeleteObject
SelectObject
CreateFontIndirectW
comdlg32
ChooseFontW
PageSetupDlgW
PrintDlgW
GetSaveFileNameW
GetOpenFileNameW
ChooseColorW
advapi32
GetTokenInformation
OpenProcessToken
IsTextUnicode
shell32
ShellExecuteW
SHBrowseForFolderW
ShellExecuteExW
SHGetPathFromIDListW
SHGetDataFromIDListW
SHGetDesktopFolder
ord180
SHAppBarMessage
SHGetFolderPathW
SHAddToRecentDocs
SHGetSpecialFolderPathW
DragQueryFileW
Shell_NotifyIconW
SHCreateDirectoryExW
DragAcceptFiles
DragFinish
SHGetFileInfoW
ole32
OleInitialize
OleUninitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
DoDragDrop
RegisterDragDrop
RevokeDragDrop
CLSIDFromProgID
CoUninitialize
CoInitialize
imm32
ImmNotifyIME
ImmSetCompositionStringW
ImmEscapeW
ImmGetCompositionStringW
ImmSetCompositionWindow
ImmSetCompositionFontW
ImmReleaseContext
ImmGetContext
ImmSetCandidateWindow
msimg32
AlphaBlend
oleaut32
SysFreeString
SysAllocString
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
170KB
Virtual Size
207KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
50KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
116KB
Virtual Size
115KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=241, version=40116,
count=149, id=243, version=40116,
count=28, id=242, version=40116,
count=8, id=259, version=24723,
count=53, id=261, version=24723,
count=37, id=260, version=24723,
count=4, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=135, version=30729,
count=25, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=487, id=1, productName=Unmarked objects,
count=78, id=264, version=25019,
count=1, id=255, version=25019,
count=1, id=258, version=25019,
Notepad2-mod/64-bit/Readme-mod.txt
- SHA256 de049c952d59ac04ec2d1e9c40decdcfe685d9fb17ba936d81389992b2619c2b
- MD5 51a8ee2fe7e443c5e805d60b85c2a7d6
- SHA1 c2ea850922b755fc10a826238bf12094eacb93f0
- SHA512 763ec7a452ab2025a15c3598fea04034ea68effcd4663376df1e9c8c6b19c23164de456b7b46e6641cc173d8edb1e6d77539e7cc38b06d0fe230f1a454bbc077
- TLSH T19621869E760C634FDEB547E223AE7111AB2312F4B58209B6F41C49CC13011BAD23ED1C
- MD5 SHA1 SHA512 TLSH
Notepad2-mod/64-bit/Readme_CN.txt
- SHA256 287a6a0c53b9193090cfce3bb2e2c768bf6998f59ec3692e7afc025b22268acc
- MD5 23e8d36481f10add49800dd9e65c337d
- SHA1 b77835d7da6577f0f7ff400dfb79c086587a17bb
- SHA512 5b24ce9df7a4bde7a3b2495cd3831e40409d9ce32a1304dfae1b46a16c0fda9fc8e5e7288f2e953a6156f3b2957a247844a7e8a14bbe521721d478d908230aa1
- TLSH T12951235792FA2207E73FCB826AC8062A4F8DD0E19D5C3FB6D5B80C3C10195C6987589D
- MD5 SHA1 SHA512 TLSH