f6d48867d815d6322199e90aa71a8c69
Summary
| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2011-May-06 09:44:30 |
| Detected languages |
English - United States
|
| FileDescription | Notepad2 x64 |
| FileVersion | 4.2.25 |
| InternalName | Notepad2 |
| LegalCopyright | © Florian Balmer 2004-2011 |
| OriginalFilename | Notepad2.exe |
Plugin Output
| Info | Interesting strings found in the binary: |
Contains domain names:
|
| Malicious | The PE contains functions mostly used by malware. |
[!] The program may be hiding some of its imports:
|
| Safe | VirusTotal score: 0/70 (Scanned on 2021-02-21 04:04:47) | All the AVs think this file is safe. |
Hashes
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0xf8 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections | 5 |
| TimeDateStamp | 2011-May-06 09:44:30 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xf0 |
| Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
Image Optional Header
| Magic | PE32+ |
|---|---|
| LinkerVersion | 9.2 |
| SizeOfCode | 0xa6400 |
| SizeOfInitializedData | 0x42600 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x000000000009A770 (Section: .text) |
| BaseOfCode | 0x1000 |
| ImageBase | 0x140000000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 5.2 |
| ImageVersion | 5.2 |
| SubsystemVersion | 5.2 |
| Win32VersionValue | 0 |
| SizeOfImage | 0xec000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0xe7080 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
.text
.data
.pdata
.rsrc
.reloc
Imports
| KERNEL32.dll |
LoadResource
FindResourceW SearchPathW GetCommandLineW GetPrivateProfileStringW CreateProcessW GetStartupInfoW FindNextChangeNotification CompareFileTime FindClose FindFirstFileW FindCloseChangeNotification FindFirstChangeNotificationW GetTimeFormatW GetDateFormatW SetFileAttributesW LockResource SetErrorMode SetCurrentDirectoryW GetVersion VirtualProtect Sleep GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SizeofResource FreeResource WritePrivateProfileSectionW GetPrivateProfileSectionW GetLocaleInfoW ExpandEnvironmentStringsW GetLongPathNameW GetWindowsDirectoryW GetCurrentProcess GetModuleHandleA SetEndOfFile WriteFile CreateFileW GetLastError GetFileSize ReadFile lstrcmpiA lstrcmpA lstrcpynA lstrcatA lstrlenA GetOEMCP LocalSize lstrcpyA lstrcmpW GetPrivateProfileIntW LocalAlloc CreateThread CreateEventW CloseHandle ResetEvent WaitForSingleObject GetFileAttributesW SetEvent ExitThread lstrcpynW lstrcatW lstrcmpiW GetModuleFileNameW lstrcpyW GetCurrentDirectoryW FormatMessageW LocalFree lstrlenW WritePrivateProfileStringW LCMapStringW GetTickCount GlobalFree GlobalSize GlobalUnlock GlobalAlloc GlobalLock IsValidCodePage GetCPInfo WideCharToMultiByte GetLocaleInfoA GetModuleHandleW GetVersionExW InitializeCriticalSection LoadLibraryW GetProcAddress FreeLibrary LoadLibraryA LeaveCriticalSection MultiByteToWideChar DeleteCriticalSection IsDBCSLeadByteEx QueryPerformanceFrequency QueryPerformanceCounter GetACP MulDiv EnterCriticalSection GetLocalTime |
|---|---|
| USER32.dll |
SetClipboardViewer
IntersectRect IsWindow SetMenuDefaultItem ShowOwnedPopups TrackPopupMenuEx GetSubMenu LoadMenuW PostQuitMessage ChangeClipboardChain RegisterClassW GetMessageW IsDialogMessageW TranslateAcceleratorW LoadAcceleratorsW RegisterWindowMessageW MessageBoxW CharPrevW IsCharAlphaNumericW MessageBoxExW wsprintfW IsChild IsWindowUnicode SetFocus GetMessageTime MsgWaitForMultipleObjects PostMessageW GetUpdateRgn SetCaretPos RegisterClipboardFormatW GetCaretBlinkTime HideCaret DestroyCaret CreateCaret ShowCaret GetWindowPlacement EmptyClipboard SystemParametersInfoW AppendMenuA OpenClipboard GetClipboardData CloseClipboard SetClipboardData IsClipboardFormatAvailable GetDlgCtrlID GetScrollInfo SetScrollInfo ScrollWindow UpdateWindow SetTimer KillTimer GetKeyboardLayout CreatePopupMenu RegisterClassExW SetWindowLongW ReleaseCapture InflateRect DrawTextW DrawTextA DrawFocusRect GetDC ReleaseDC FrameRect DestroyCursor GetKeyState GetDoubleClickTime GetSysColor TrackPopupMenu DestroyMenu UnregisterClassW CallWindowProcW IsZoomed EqualRect OffsetRect SetWindowPlacement GetForegroundWindow EnumWindows IsIconic ShowWindowAsync IsWindowVisible GetClassNameW EnableMenuItem CheckMenuItem CheckMenuRadioItem CountClipboardFormats CopyImage SetWindowTextW SetActiveWindow SetForegroundWindow DrawAnimatedRects FindWindowExW CreateDialogIndirectParamW DialogBoxIndirectParamW CharUpperBuffW GetMenu GetMenuState IsWindowEnabled SetRect DeferWindowPos GetMenuStringW GetSystemMenu InsertMenuW ChildWindowFromPoint GetCapture GetActiveWindow GetSysColorBrush IsCharLowerA wsprintfA IsCharUpperW CharLowerW IsCharLowerW CharUpperW IsCharAlphaNumericA CharLowerA CharNextW SetCursorPos LoadIconW LoadImageW GetDlgItemInt wvsprintfW SetDlgItemInt CheckRadioButton GetPropW PeekMessageW TranslateMessage DispatchMessageW SetPropW CheckDlgButton RemovePropW IsDlgButtonChecked GetWindowTextLengthW MessageBeep BeginDeferWindowPos EndDeferWindowPos GetDlgItemTextW EnableWindow EndDialog SetDlgItemTextW SendDlgItemMessageW GetDlgItem MessageBoxIndirectW LoadStringW ScreenToClient GetParent BeginPaint EndPaint DefWindowProcW GetCursorPos SetCapture GetSystemMetrics AdjustWindowRectEx CreateWindowExW MapWindowPoints MonitorFromPoint SetCursor LoadCursorW GetIconInfo CreateIconIndirect SendMessageW InvalidateRect ShowWindow GetClientRect GetWindowLongW GetWindowLongPtrW SetWindowLongPtrW FillRect DestroyWindow GetFocus GetWindowRect SetWindowPos GetMonitorInfoW MonitorFromRect ClientToScreen |
| GDI32.dll |
RoundRect
Ellipse BitBlt GetTextExtentPoint32A GetTextMetricsW RealizePalette IntersectClipRect StretchBlt GetObjectW CreateFontIndirectW GetStockObject CreateFontIndirectA CreateDIBSection GetTextExtentPoint32W GetTextExtentExPointA GetNearestColor SetTextColor CreatePatternBrush SetBkMode TranslateCharsetInfo CombineRgn CreateRectRgn CreateBitmap EnumFontsW SetMapMode EndDoc EndPage StartPage StartDocW CreateFontW DPtoLP CreateSolidBrush CreatePen CreateCompatibleBitmap CreateCompatibleDC SetBkColor ExtTextOutW Rectangle Polygon LineTo ExtTextOutA MoveToEx SetTextAlign SelectObject SelectPalette DeleteDC DeleteObject GetTextExtentExPointW GetDeviceCaps CreatePalette |
| ADVAPI32.dll |
IsTextUnicode
OpenProcessToken GetTokenInformation |
| SHELL32.dll |
SHGetPathFromIDListW
ShellExecuteW ShellExecuteExW SHGetFileInfoW SHGetDataFromIDListW SHGetDesktopFolder SHGetFolderPathW #180 SHGetSpecialFolderPathW SHAppBarMessage SHCreateDirectoryExW Shell_NotifyIconW DragAcceptFiles SHAddToRecentDocs DragFinish DragQueryFileW SHBrowseForFolderW |
| SHLWAPI.dll |
PathUnExpandEnvStringsW
StrCmpNIW StrDupA StrCmpIW StrDupW StrCatBuffA StrChrA StrCatW StrCpyW StrStrA StrCmpNA StrChrIA StrCmpNIA UrlUnescapeW UrlEscapeW StrNCatW PathCommonPrefixW StrStrIA StrCpyNW StrRetToBufW PathMatchSpecW StrChrW PathUnquoteSpacesW PathIsUNCW PathFileExistsW PathFindFileNameW PathQuoteSpacesW PathRemoveFileSpecW SHAutoComplete StrTrimW StrCatBuffW PathAppendW PathRelativePathToW PathIsPrefixW PathIsRelativeW StrChrIW PathCanonicalizeW PathGetDriveNumberW PathFindExtensionW PathIsRootW StrStrW PathIsDirectoryW PathStripToRootW PathRenameExtensionW StrRChrW StrFormatByteSizeW PathCompactPathExW StrStrIW StrCmpW StrTrimA |
| COMDLG32.dll |
PrintDlgW
ChooseColorW ChooseFontW GetSaveFileNameW GetOpenFileNameW PageSetupDlgW |
| COMCTL32.dll |
ImageList_AddMasked
#8 CreateStatusWindowW ImageList_Create ImageList_Destroy InitCommonControlsEx |
| IMM32.dll |
ImmReleaseContext
ImmGetCompositionStringW ImmGetContext ImmSetCompositionFontA ImmNotifyIME ImmSetCompositionWindow |
| ole32.dll |
CoUninitialize
CoTaskMemFree RegisterDragDrop RevokeDragDrop OleUninitialize DoDragDrop OleInitialize CoInitialize CoTaskMemAlloc CoCreateInstance |
| msvcrt.dll |
qsort
strncpy memmove abs strncat clock iscntrl sscanf rand srand _swab swscanf wcsftime mktime __CxxFrameHandler ??1type_info@@UEAA@XZ __C_specific_handler _unlock __dllonexit _lock _onexit ?terminate@@YAXXZ _ismbblead memset __getmainargs _XcptFilter _exit _cexit exit _acmdln _initterm _amsg_exit __setusermatherr _commode _fmode __set_app_type isspace toupper memcmp memcpy isupper strlen strcpy strncmp strstr islower strcmp sprintf atoi _purecall ??2@YAPEAX_K@Z strchr tolower ispunct isalpha isdigit isalnum ??3@YAXPEAX@Z |
| msvcp60.dll |
??9std@@YA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Mstd@@YA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z ??8std@@YA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PEBD@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@_KDAEBV?$allocator@D@1@@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@_K1AEBV?$allocator@D@1@@Z ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV12@_K0@Z ?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV12@_KPEBD0@Z ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2_KB ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD_KAEBV?$allocator@D@1@@Z ??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAD_K@Z ??0_Lockit@std@@QEAA@XZ ??1_Lockit@std@@QEAA@XZ ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBDAEBV?$allocator@D@1@@Z ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@AEBV01@@Z ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@PEBD@Z ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPEBDXZ@4DB ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@PEBD@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV?$allocator@D@1@@Z ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@D@Z ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ ??9std@@YA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PEBD@Z |
Delayed Imports
12
100
101
102
103
104
105
1
2
3
4
5
6
7
8
9
10
11
100 (#2)
101 (#2)
100 (#3)
101 (#3)
102 (#2)
103 (#2)
104 (#2)
105 (#2)
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
626
627
2544
2545
2546
2551
3126
3127
3128
3751
3813
3814
3815
3816
3817
3818
3876
3938
3939
3944
3945
3946
3947
3948
3949
3950
3951
3952
3953
3954
100 (#4)
101 (#4)
100 (#5)
100 (#6)
101 (#5)
102 (#3)
1 (#2)
1 (#3)
String Table contents
| Notepad2 |
| %s (Administrator) |
| Notepad2 : Paste Board |
| Untitled |
| "%s" |
| (Read Only) |
| Ln %s : %s Col %s Sel %s |
| Ln %s : %s Col %s : %s Sel %s |
| %s |
| Loading "%s"... |
| Saving "%s"... |
| Printing page %i... |
| Saving settings... |
| Edit with Notepad2 |
| All files (*.*)|*.*| |
| Executable files (*.exe;*.com;*.bat;*.cmd;*.lnk;*.pif)|*.exe;*.com;*.bat;*.cmd;*.lnk;*.pif|All files (*.*)|*.*| |
| Configuration files (*.ini)|*.ini|All files (*.*)|*.*| |
| Select the directory with links to your favorite applications. |
| Select the directory with links to your favorite files. |
| New |
| Open |
| Browse |
| Save |
| Undo |
| Redo |
| Cut |
| Copy |
| Paste |
| Find |
| Replace |
| Word Wrap |
| Zoom In |
| Zoom Out |
| Select Scheme |
| Customize Schemes |
| Exit |
| Save As |
| Save Copy |
| Clear |
| Favorites |
| Add to Favorites |
| &Save Position Ctrl+O |
| &Reset Position Ctrl+P |
| Error loading "%s". |
| Error saving "%s". |
| No file browser plugin was found. |
| The metapath file browser plugin can be downloaded from http://www.flos-freeware.ch. |
| No access to the selected file! |
| Would you like to remove it from the list? |
| Error creating the Desktop link. |
| Existing Notepad2 window is busy or has an active dialog box. |
| Would you like to open another Notepad2 window? |
| This operation can't be perfomed within a rectangular selection. |
| This operation can't be performed (lines too long). |
| Reached the end of the document, restarting search at the beginning. |
| Reached the beginning of the document, restarting search at the end. |
| The specified text was not found. |
| %i occurrences of the specified text have been replaced. |
| Switching the file encoding from ANSI to non-ANSI (and vice versa) may replace unsupported text with default characters, and the undo history will be cleared. Continue? |
| You are about to change the encoding of an empty file from ANSI to non-ANSI. Note that this will clear the undo history, as it can't be synchronized with the new encoding. Continue? |
| Code page conversion tables for the selected encoding are not available on your system. |
| Error converting this Unicode file. |
| Data will be lost if the file is saved! |
| Certain characters in the current text are not supported by the selected encoding, and may be replaced by default placeholders when saving. It's recommended to choose another file encoding. Continue? |
| Are you sure you want to open this large file? |
| Only one file can be dropped at the same time! |
| Save changes to "%s"? |
| Revert file to last saved state? Your changes will be lost! |
| Recoding requires reloading file from disk, unsaved changes will be lost! |
| "%s" not found. |
| Would you like to create this file? |
| Filename, Current Date and Time|Filename, Current Date|Filename|Leave blank |
| Page Number|Leave blank |
| Normal|Invert light (dark background)|Black on white|Color on white|Color on white (except line numbers) |
| Page %i |
| This document doesn't contain any text to be printed. |
| Error printing "%s"! |
| A shortcut to the current file has been created in the favorites directory. |
| The shortcut to the current file could not be created. |
| Make sure there's no other file with the same name. |
| The attributes of "%s" could not be modified. |
| "%s" is read only. Save to a different file? |
| The current file has been modified by an external program. Reload? |
| The current file has been deleted. Save now? |
| Sticky Window Position is enabled. Any new Notepad2 windows will use the current window placement settings. |
| The current program settings have been saved. |
| Error creating configuration file. |
| Error writing settings to configuration file. |
| No existing configuration file was found. |
| To keep your style modifications, save settings now (F7) or go back to scheme configuration (Ctrl+F12) and export your styles. |
| Error exporting style settings to "%s". |
| Command Line Help |
| file Must be the last argument, no quoted spaces by default. |
| + Accept multiple file arguments (with quoted spaces). |
| - Accept single file argument (without quoted spaces). |
| … Encoding (/ansi, /unicode, /unicodebe, /utf8, /utf8sig). |
| … Line ending mode (/crlf, /lf, /cr). |
| /e File source encoding. |
| /g Jump to specified position (/g -1 end of file). |
| /m Match specified text (/m- last, /mr regex, /mb backslash). |
| /l Auto-reload modified files. |
| /q Force creation of new files without prompt. |
| /s Select specified syntax scheme. |
| /d Select default text scheme. |
| /h Select Web Source Code scheme. |
| /x Select XML Document scheme. |
| /c Open new window and paste clipboard contents. |
| /b Open new paste board to collect clipboard entries. |
| /n Always open a new window (/ns single file instance). |
| /r Reuse window (/rs single file instance). |
| /p Set window position and size (/p0, /ps, /pf,l,t,r,b,m). |
| /t Set window title. |
| /i Start as tray icon. |
| /o Keep window on top. |
| /f Specify ini-file (/f0 no ini-file). |
| /u Launch with elevated privileges. |
| /z Skip next (usable for registry-based Notepad replacement). |
| A0;ANSI;ANSI |
| A1;OEM;OEM |
| A2;Unicode (UTF-16 LE BOM);Unicode BOM |
| A3;Unicode (UTF-16 BE BOM);Unicode BE BOM |
| A4;Unicode (UTF-16 LE);Unicode |
| A5;Unicode (UTF-16 BE);Unicode BE |
| A6;UTF-8;UTF-8 |
| A7;UTF-8 Signature;UTF-8 Signature |
| A8;UTF-7;UTF-7 |
| C;Arabic (DOS-720);DOS-720 |
| C;Arabic (ISO-8859-6);ISO-8859-6 |
| C;Arabic (Mac);Mac (Arabic) |
| C;Arabic (Windows-1256);Windows-1256 |
| C;Baltic (DOS-775);DOS-775 |
| C;Baltic (ISO-8859-4);ISO-8859-4 |
| C;Baltic (Windows-1257);Windows-1257 |
| C;Central European (DOS-852);DOS-852 |
| C;Central European (ISO-8859-2);ISO-8859-2 |
| C;Central European (Mac);Mac (Central) |
| C;Central European (Windows-1250);Windows-1250 |
| C;Chinese Simplified (GBK);GBK |
| C;Chinese Simplified (Mac);Mac (zh-cn) |
| C;Chinese Traditional (Big5);Big5 |
| C;Chinese Traditional (Mac);Mac (zh-tw) |
| C;Croatian (Mac);Mac (Croatian) |
| C;Cyrillic (DOS-866);DOS-866 |
| C;Cyrillic (ISO-8859-5);ISO-8859-5 |
| C;Cyrillic (KOI8-R);KOI8-R |
| C;Cyrillic (KOI8-U);KOI8-U |
| C;Cyrillic (Mac);Mac (Cyrillic) |
| C;Cyrillic (Windows-1251);Windows-1251 |
| C;Estonian (ISO-8859-13);ISO-8859-13 |
| C;French Canadian (DOS-863);DOS-863 |
| C;Greek (DOS-737);DOS-737 |
| C;Greek (ISO-8859-7);ISO-8859-7 |
| C;Greek (Mac);Mac (Greek) |
| C;Greek (Windows-1253);Windows-1253 |
| C;Greek, Modern (DOS-869);DOS-869 |
| C;Hebrew (DOS-862);DOS-862 |
| C;Hebrew (ISO-8859-8-I);ISO-8859-8-I |
| C;Hebrew (ISO-8859-8);ISO-8859-8 |
| C;Hebrew (Mac);Mac (Hebrew) |
| C;Hebrew (Windows-1255);Windows-1255 |
| C;Icelandic (DOS-861);DOS-861 |
| C;Icelandic (Mac);Mac (Icelandic) |
| C;Japanese (Mac);Mac (Japanese) |
| C;Japanese (Shift-JIS);Shift-JIS |
| C;Korean (Mac);Mac (Korean) |
| C;Korean (Windows-949);Windows-949 |
| C;Latin 3 (ISO-8859-3);ISO-8859-3 |
| C;Latin 9 (ISO-8859-15);ISO-8859-15 |
| C;Nordic (DOS-865);DOS-865 |
| C;OEM United States (DOS-437);DOS-437 |
| C;OEM Multilingual Latin 1 (DOS-858);DOS-858 |
| C;Portuguese (DOS-860);DOS-860 |
| C;Romanian (Mac);Mac (Romanian) |
| C;Thai (Mac);Mac (Thai) |
| C;Thai (Windows-874);Windows-874 |
| C;Turkish (DOS-857);DOS-857 |
| C;Turkish (ISO-8859-9);ISO-8859-9 |
| C;Turkish (Mac);Mac (Turkish) |
| C;Turkish (Windows-1254);Windows-1254 |
| C;Ukrainian (Mac);Mac (Ukrainian) |
| C;Vietnamese (Windows-1258);Windows-1258 |
| B;Western European (DOS-850);DOS-850 |
| B;Western European (ISO-8859-1);ISO-8859-1 |
| B;Western European (Mac);Mac (Western) |
| B;Western European (Windows-1252);Windows-1252 |
| D0;IBM EBCDIC (US-Canada);EBCDIC (US) |
| D1;IBM EBCDIC (International);EBCDIC (Int.) |
| D2;IBM EBCDIC (Greek Modern);EBCDIC (GR) |
| D3;IBM EBCDIC (Turkish Latin-5);EBCDIC (Latin-5) |
| C;Chinese Simplified (GB18030);GB18030 |
| Windows (CR+LF) |
| Unix (LF) |
| Mac (CR) |
| Default Text |
| Web Source Code |
| XML Document |
| CSS Style Sheets |
| C/C++ Source Code |
| C# Source Code |
| Resource Script |
| Makefiles |
| VBScript |
| Visual Basic |
| JavaScript |
| Java Source Code |
| Pascal Source Code |
| Assembly Script |
| Perl Script |
| Configuration Files |
| Batch Files |
| Diff Files |
| SQL Query |
| Python Script |
| Apache Config Files |
| PowerShell Script |
| Default Style |
| Margins and Line Numbers |
| Matching Braces |
| Matching Braces Error |
| Control Characters (Font) |
| Indentation Guide (Color) |
| Selected Text (Colors) |
| Whitespace (Colors, Size 0-5) |
| Current Line Background (Color) |
| Caret (Color, Size 1-3) |
| Long Line Marker (Colors) |
| Extra Line Spacing (Size) |
| 2nd Default Style |
| 2nd Margins and Line Numbers |
| 2nd Matching Braces |
| 2nd Matching Braces Error |
| 2nd Control Characters (Font) |
| 2nd Indentation Guide (Color) |
| 2nd Selected Text (Colors) |
| 2nd Whitespace (Colors, Size 0-5) |
| 2nd Current Line Background (Color) |
| 2nd Caret (Color, Size 1-3) |
| 2nd Long Line Marker (Colors) |
| 2nd Extra Line Spacing (Size) |
| Default |
| Comment |
| Keyword |
| Identifier |
| Number |
| String |
| Operator |
| Preprocessor |
| Verbatim String |
| Regex |
| HTML Tag |
| HTML Unknown Tag |
| HTML Attribute |
| HTML Unknown Attribute |
| HTML Value |
| HTML String |
| HTML Other Inside Tag |
| HTML Comment |
| HTML Entity |
| XML Identifier |
| ASP Start Tag |
| CDATA |
| PHP Start Tag |
| PHP Default |
| PHP String |
| PHP Simple String |
| PHP Keyword |
| PHP Number |
| PHP Variable |
| PHP String Variable |
| PHP Complex Variable |
| PHP Comment |
| PHP Operator |
| JS Default |
| JS Comment |
| JS Number |
| JS Identifier |
| JS Keyword |
| JS String |
| JS Symbols |
| JS Regex |
| ASP JS Default |
| ASP JS Comment |
| ASP JS Number |
| ASP JS Identifier |
| ASP JS Keyword |
| ASP JS String |
| ASP JS Symbols |
| ASP JS Regex |
| VBS Default |
| VBS Comment |
| VBS Number |
| VBS Keyword |
| VBS String |
| VBS Identifier |
| ASP VBS Default |
| ASP VBS Comment |
| ASP VBS Number |
| ASP VBS Keyword |
| ASP VBS String |
| ASP VBS Identifier |
| XML Tag |
| XML Attribute |
| XML Value |
| XML String |
| XML Other Inside Tag |
| XML Comment |
| XML Entity |
| Tag-Class |
| Tag-Id |
| Tag-Attribute |
| Pseudo-class/element |
| Unknown Pseudo-class |
| CSS Property |
| Unknown Property |
| Value |
| Important |
| Directive |
| Target |
| Inline Asm |
| CPU Instruction |
| FPU Instruction |
| Register |
| Directive Operand |
| Extended Instruction |
| String double quoted |
| String single quoted |
| POD (common) |
| POD (verbatim) |
| Scalar $var |
| Array @var |
| Hash %var |
| Symbol table *var |
| Regex /re/ or m{re} |
| Substitution s/re/ore/ |
| Back ticks |
| Data section |
| Here-doc (delimiter) |
| Here-doc (single quoted, q) |
| Here-doc (double quoted, qq) |
| Here-doc (back ticks, qx) |
| Single quoted string (generic, q) |
| Double quoted string (qq) |
| Back ticks (qx) |
| Regex (qr) |
| Array (qw) |
| Section |
| Assignment |
| Default Value |
| Label |
| Command |
| SGML |
| Source and Destination |
| Position Setting |
| Line Addition |
| Line Removal |
| Line Change |
| Quoted Identifier |
| String triple double quotes |
| String triple single quotes |
| Class name |
| Function name |
| IP Address |
| Variable |
| Cmdlet |
| Alias |
| Parsing error |
| Prototype |
| Format identifier |
| Format body |
| HTML Element Text |
| XML Element Text |
Version Info
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 4.2.25.0 |
| ProductVersion | 4.2.25.0 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | English - United States |
| FileDescription | Notepad2 x64 |
| FileVersion (#2) | 4.2.25 |
| InternalName | Notepad2 |
| LegalCopyright | © Florian Balmer 2004-2011 |
| OriginalFilename | Notepad2.exe |
| Resource LangID | English - United States |
|---|
TLS Callbacks
Load Configuration
RICH Header
| XOR Key | 0xa87321c4 |
|---|---|
| Unmarked objects | 0 |
| ASM objects (VS2008 SP1 build 30729) | 2 |
| 135 (VS2008 SP1 build 30729) | 1 |
| Imports (VS2008 SP1 build 30729) | 25 |
| Total imports | 560 |
| C objects (VS2008 SP1 build 30729) | 73 |
| C++ objects (VS2008 SP1 build 30729) | 64 |
| 126 (VS2012 build 50727 / VS2005 build 50727) | 1 |
| Linker (VS2008 SP1 build 30729) | 1 |
| Resource objects (VS2008 SP1 build 30729) | 1 |