notepad .exe

info
MZ
PE
resources
imports
foremost
hexdump
disasm
log
discuss
donate

filename	notepad .exe
size	348160 (0x55000)
md5	211d3986706258f78ad83bda909d5d2b

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe8

Rich Header

lib id	version	times used
39	9162	2
64	9466	20
28	9466	88
25	9210	15
1	0	201
29	9466	36
69	9466	1
0	0	2
61	9466	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x3fecee5e
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	7.0
SizeOfCode	0x17000
SizeOfInitializedData	0x40000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x10f93
BaseOfCode	0x1000
BaseOfData	0x18000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	1.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x58000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v7.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x16e40	0x17000	R-X CODE
.rdata	0x18000	0x4b3c	0x5000	R-- IDATA
.data	0x1d000	0x3378	0x1000	RW- IDATA
.rsrc	0x21000	0x36370	0x37000	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x1bae8	0xa0
RESOURCE	0x21000	0x36370
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x18000	0x304
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
TEXTINCLUDE	#1	51
TEXTINCLUDE	#2	55
CURSOR	#91	2220
CURSOR	#92	308
CURSOR	#93	748
CURSOR	#94	748
CURSOR	#95	748
ICON	#1	1384
ICON	#2	2216
ICON	#3	3752
ICON	#4	51240
ICON	#5	5672
ICON	#6	2216
ICON	#7	2216
ICON	#8	744
ICON	#9	2216
ICON	#10	744
ICON	#11	2216
ICON	#12	2216
ICON	#13	744
ICON	#14	2216
ICON	#15	744
ICON	#16	2216
ICON	#17	744
ICON	#18	2216
ICON	#19	744
ICON	#20	2216
ICON	#21	744
ICON	#22	2216
ICON	#23	744
ICON	#24	2216
ICON	#25	744
ICON	#26	2216
ICON	#27	744
ICON	#28	2216
ICON	#29	744
ICON	#30	2216
ICON	#31	744
ICON	#32	2216
ICON	#33	744
ICON	#34	3240
ICON	#35	744
ICON	#36	3240
ICON	#37	3240
ICON	#38	744
ICON	#39	2216
ICON	#40	2216
ICON	#41	2216
ICON	#42	744
ICON	#43	2216
ICON	#44	744
ICON	#45	2216
ICON	#46	2216
ICON	#47	744
ICON	#48	2216
ICON	#49	744
ICON	#50	2216
ICON	#51	744
ICON	#52	2216
ICON	#53	744
ICON	#54	2216
ICON	#55	744
ICON	#56	2216
ICON	#57	744
ICON	#58	2216
ICON	#59	744
ICON	#60	2216
ICON	#61	744
ICON	#62	2216
ICON	#63	744
ICON	#64	2216
ICON	#65	744
ICON	#66	2216
ICON	#67	744
ICON	#68	3240
ICON	#69	744
ICON	#70	3240
ICON	#71	3240
ICON	#72	744
ICON	#73	2216
ICON	#74	744
ICON	#75	2216
ICON	#76	744
ICON	#77	2216
ICON	#78	744
ICON	#79	2216
ICON	#80	744
ICON	#81	2216
ICON	#82	744
ICON	#83	2216
ICON	#84	744
ICON	#85	2216
ICON	#86	744
ICON	#87	2216
ICON	#88	1320
ICON	#89	1544
ICON	#90	2216
MENU	#1500	1796
DIALOG	#1600	752
DIALOG	#1700	592
DIALOG	#1800	1178
DIALOG	#1900	326
ACCELERATORS	#1501	48
GROUP_CURSOR	#1402	20
GROUP_CURSOR	#1403	20
GROUP_CURSOR	#1404	20
GROUP_CURSOR	#1405	20
GROUP_CURSOR	#1406	20
GROUP_ICON	#100	76
GROUP_ICON	#201	20
GROUP_ICON	#202	20
GROUP_ICON	#203	20
GROUP_ICON	#204	34
GROUP_ICON	#205	34
GROUP_ICON	#206	34
GROUP_ICON	#207	34
GROUP_ICON	#208	34
GROUP_ICON	#209	34
GROUP_ICON	#210	34
GROUP_ICON	#211	34
GROUP_ICON	#212	34
GROUP_ICON	#213	34
GROUP_ICON	#214	34
GROUP_ICON	#215	34
GROUP_ICON	#216	34
GROUP_ICON	#217	34
GROUP_ICON	#218	34
GROUP_ICON	#219	20
GROUP_ICON	#301	20
GROUP_ICON	#302	20
GROUP_ICON	#303	20
GROUP_ICON	#304	34
GROUP_ICON	#305	34
GROUP_ICON	#306	34
GROUP_ICON	#307	34
GROUP_ICON	#308	34
GROUP_ICON	#309	34
GROUP_ICON	#310	34
GROUP_ICON	#311	34
GROUP_ICON	#312	34
GROUP_ICON	#313	34
GROUP_ICON	#314	34
GROUP_ICON	#315	34
GROUP_ICON	#316	34
GROUP_ICON	#317	34
GROUP_ICON	#318	34
GROUP_ICON	#319	20
GROUP_ICON	#403	34
GROUP_ICON	#404	34
GROUP_ICON	#407	34
GROUP_ICON	#408	34
GROUP_ICON	#409	34
GROUP_ICON	#410	34
GROUP_ICON	#411	34
GROUP_ICON	#501	20
GROUP_ICON	#502	20
GROUP_ICON	#503	20

module_name	hint	ord	function_name
COMCTL32.dll	38		ImageList_Create
COMCTL32.dll		17
COMCTL32.dll	39		ImageList_Destroy
COMCTL32.dll	65		ImageList_ReplaceIcon
COMCTL32.dll	70		ImageList_SetIconSize
COMCTL32.dll	44		ImageList_Draw
COMCTL32.dll	55		ImageList_GetImageInfo
COMCTL32.dll	76		InitCommonControlsEx
SHLWAPI.dll	38		PathFileExistsA
SHLWAPI.dll	42		PathFindFileNameA
SHLWAPI.dll	40		PathFindExtensionA
SHELL32.dll	21		DragFinish
SHELL32.dll	26		DragQueryPoint
SHELL32.dll	152		ShellExecuteA
SHELL32.dll	23		DragQueryFileA
KERNEL32.dll	359		GetModuleHandleA
KERNEL32.dll	229		FreeLibrary
KERNEL32.dll	74		CreateFileA
KERNEL32.dll	753		SetFilePointer
KERNEL32.dll	219		FlushFileBuffers
KERNEL32.dll	780		SetStdHandle
KERNEL32.dll	449		GetTimeZoneInformation
KERNEL32.dll	545		LCMapStringW
KERNEL32.dll	593		MultiByteToWideChar
KERNEL32.dll	544		LCMapStringA
KERNEL32.dll	241		GetCPInfo
KERNEL32.dll	380		GetOEMCP
KERNEL32.dll	235		GetACP
KERNEL32.dll	526		IsBadCodePtr
KERNEL32.dll	529		IsBadReadPtr
KERNEL32.dll	532		IsBadWritePtr
KERNEL32.dll	853		VirtualAlloc
KERNEL32.dll	856		VirtualFree
KERNEL32.dll	497		HeapCreate
KERNEL32.dll	499		HeapDestroy
KERNEL32.dll	336		GetFileType
KERNEL32.dll	762		SetHandleCount
KERNEL32.dll	321		GetEnvironmentStringsW
KERNEL32.dll	873		WideCharToMultiByte
KERNEL32.dll	346		GetLastError
KERNEL32.dll	319		GetEnvironmentStrings
KERNEL32.dll	227		FreeEnvironmentStringsA
KERNEL32.dll	834		UnhandledExceptionFilter
KERNEL32.dll	414		GetStdHandle
KERNEL32.dll	507		HeapSize
KERNEL32.dll	505		HeapReAlloc
KERNEL32.dll	886		WriteFile
KERNEL32.dll	303		GetCurrentProcess
KERNEL32.dll	817		TerminateProcess
KERNEL32.dll	393		GetProcAddress
KERNEL32.dll	301		GetCurrentDirectoryA
KERNEL32.dll	339		GetFullPathNameA
KERNEL32.dll	357		GetModuleFileNameA
KERNEL32.dll	428		GetSystemTimeAsFileTime
KERNEL32.dll	304		GetCurrentProcessId
KERNEL32.dll	306		GetCurrentThreadId
KERNEL32.dll	446		GetTickCount
KERNEL32.dll	638		QueryPerformanceCounter
KERNEL32.dll	797		SetUnhandledExceptionFilter
KERNEL32.dll	495		HeapAlloc
KERNEL32.dll	501		HeapFree
KERNEL32.dll	456		GetVersionExA
KERNEL32.dll	253		GetCommandLineA
KERNEL32.dll	412		GetStartupInfoA
KERNEL32.dll	197		FindFirstFileA
KERNEL32.dll	317		GetDriveTypeA
KERNEL32.dll	183		FileTimeToLocalFileTime
KERNEL32.dll	184		FileTimeToSystemTime
KERNEL32.dll	193		FindClose
KERNEL32.dll	171		ExitProcess
KERNEL32.dll	689		RtlUnwind
KERNEL32.dll	643		RaiseException
KERNEL32.dll	224		FormatMessageA
KERNEL32.dll	558		LoadLibraryA
KERNEL32.dll	44		CloseHandle
KERNEL32.dll	745		SetEnvironmentVariableA
KERNEL32.dll	656		ReadFile
KERNEL32.dll	415		GetStringTypeA
KERNEL32.dll	418		GetStringTypeW
KERNEL32.dll	349		GetLocaleInfoA
KERNEL32.dll	859		VirtualProtect
KERNEL32.dll	424		GetSystemInfo
KERNEL32.dll	861		VirtualQuery
KERNEL32.dll	744		SetEndOfFile
KERNEL32.dll	50		CompareStringA
KERNEL32.dll	51		CompareStringW
KERNEL32.dll	228		FreeEnvironmentStringsW
USER32.dll	595		SetDlgItemTextA
USER32.dll	614		SetParent
USER32.dll	233		FrameRect
USER32.dll	372		GetWindowRect
USER32.dll	375		GetWindowTextA
USER32.dll	79		CreateCursor
USER32.dll	394		InflateRect
USER32.dll	149		DestroyCursor
USER32.dll	566		SendDlgItemMessageA
USER32.dll	314		GetMessageA
USER32.dll	27		CallWindowProcA
USER32.dll	172		DragDetect
USER32.dll	243		GetCapture
USER32.dll	252		GetClassNameA
USER32.dll	349		GetSystemMetrics
USER32.dll	188		DrawTextA
USER32.dll	85		CreateDialogParamA
USER32.dll	535		RegisterClassExA
USER32.dll	439		LoadCursorA
USER32.dll	589		SetCursor
USER32.dll	580		SetCapture
USER32.dll	553		ReleaseCapture
USER32.dll	13		BeginPaint
USER32.dll	226		FillRect
USER32.dll	200		EndPaint
USER32.dll	682		TranslateMessage
USER32.dll	161		DispatchMessageA
USER32.dll	346		GetSysColor
USER32.dll	534		RegisterClassA
USER32.dll	96		CreateWindowExA
USER32.dll	679		TranslateAcceleratorA
USER32.dll	513		PostQuitMessage
USER32.dll	725		WindowFromPoint
USER32.dll	94		CreatePopupMenu
USER32.dll	397		InsertMenuA
USER32.dll	676		TrackPopupMenu
USER32.dll	289		GetKeyState
USER32.dll	267		GetCursorPos
USER32.dll	561		ScreenToClient
USER32.dll	60		ChildWindowFromPoint
USER32.dll	422		IsIconic
USER32.dll	599		SetForegroundWindow
USER32.dll	57		CheckMenuItem
USER32.dll	311		GetMenuState
USER32.dll	300		GetMenu
USER32.dll	194		EnableMenuItem
USER32.dll	646		SetWindowTextA
USER32.dll	151		DestroyMenu
USER32.dll	153		DestroyWindow
USER32.dll	640		SetWindowLongA
USER32.dll	366		GetWindowLongA
USER32.dll	598		SetFocus
USER32.dll	431		IsWindowVisible
USER32.dll	403		InvalidateRect
USER32.dll	699		UpdateWindow
USER32.dll	489		MoveWindow
USER32.dll	658		ShowWindow
USER32.dll	443		LoadIconA
USER32.dll	196		EnableWindow
USER32.dll	476		MessageBoxA
USER32.dll	275		GetDlgItemTextA
USER32.dll	255		GetClientRect
USER32.dll	64		ClientToScreen
USER32.dll	643		SetWindowPos
USER32.dll	273		GetDlgItem
USER32.dll	571		SendMessageA
USER32.dll	435		LoadAcceleratorsA
USER32.dll	502		OpenIcon
USER32.dll	227		FindWindowA
USER32.dll	142		DefWindowProcA
USER32.dll	417		IsDialogMessageA
GDI32.dll	363		GetDeviceCaps
GDI32.dll	81		DPtoLP
GDI32.dll	444		GetTextMetricsA
GDI32.dll	579		StartDocA
GDI32.dll	582		StartPage
GDI32.dll	152		EndPage
GDI32.dll	150		EndDoc
GDI32.dll	140		DeleteDC
GDI32.dll	80		CreateSolidBrush
GDI32.dll	143		DeleteObject
GDI32.dll	459		LineTo
GDI32.dll	463		MoveToEx
GDI32.dll	510		RestoreDC
GDI32.dll	570		SetTextColor
GDI32.dll	438		GetTextExtentPointA
GDI32.dll	532		SetBkMode
GDI32.dll	517		SaveDC
GDI32.dll	57		CreateFontA
GDI32.dll	524		SelectObject
GDI32.dll	58		CreateFontIndirectA
GDI32.dll	405		GetObjectA
GDI32.dll	421		GetStockObject
GDI32.dll	531		SetBkColor
GDI32.dll	502		RemoveFontResourceA
GDI32.dll	3		AddFontResourceA
comdlg32.dll	11		GetSaveFileNameA
comdlg32.dll	9		GetOpenFileNameA
comdlg32.dll	16		PrintDlgA

show previews

offset	size	type	comment
0	348160	EXE	12/27/2003 02:28:46	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK