Should I block it?

No, this file is 100% safe to run.

Additional versions

6.3.9600.16384 (winblue_rtm.130821-1623)	3.49%
6.3.9600.16384 (winblue_rtm.130821-1623)	0.11%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.19%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.01%
6.2.9200.16384 (win8_rtm.120725-1247)	2.08%
6.2.9200.16384 (win8_rtm.120725-1247)	12.12%
6.2.8400.0 (winmain_win8rc.120518-1423)	0.05%
6.2.8400.0 (winmain_win8rc.120518-1423)	0.05%
6.2.8250.0 (winmain_win8beta.120217-1520)	0.01%
6.2.8102.0 (winmain_win8m3.110823-1455)	0.05%
6.1.7600.16385 (win7_rtm.090713-1255)	21.49%
6.1.7600.16385 (win7_rtm.090713-1255)	38.43%
6.1.7600.16385 (win7_rtm.090713-1255)	0.01%
6.1.7600.16385 (win7_rtm.090713-1255)	0.01%
6.1.7600.16385 (win7_rtm.090713-1255)	0.01%
6.1.7600.16385 (win7_rtm.090713-1255)	0.01%
6.1.7600.16385 (win7_rtm.090713-1255)	0.01%
6.1.7600.16385 (win7_rtm.090713-1255)	0.01%
6.1.7600.16385 (win7_rtm.090713-1255)	0.01%
6.1.7600.16385 (win7_rtm.090713-1255)	0.09%
6.1.7600.16385 (win7_rtm.090713-1255)	0.01%
6.1.7600.16385 (win7_rtm.090713-1255)	0.05%
6.0.6000.16386 (vista_rtm.061101-2205)	5.70%
6.0.6000.16386 (vista_rtm.061101-2205)	1.58%
6.0.6000.16386 (vista_rtm.061101-2205)	0.45%
View more
5.2.3790.3959 (srv03_sp2_rtm.070216-1710)	0.01%
5.2.3790.1830 (srv03_sp1_rtm.050324-1447)	0.05%
5.1.2600.5877 (xpsp_sp3_qfe.090916-1338)	0.01%
5.1.2600.5877 (xpsp_sp3_qfe.090916-1338)	0.33%
5.1.2600.5877 (xpsp_sp3_qfe.090916-1338)	0.01%
5.1.2600.5877 (xpsp_sp3_qfe.090916-1338)	0.01%
5.1.2600.5877 (xpsp_sp3_qfe.090916-1338)	0.01%
5.1.2600.5512 (xpsp.080413-2105)	9.39%
5.1.2600.5512 (xpsp.080413-2105)	0.05%
5.1.2600.5512 (xpsp.080413-2105)	0.05%
5.1.2600.5512 (xpsp.080413-2105)	0.05%
5.1.2600.5512 (xpsp.080413-2105)	0.01%
5.1.2600.5512 (xpsp.080413-2105)	0.01%
5.1.2600.5512 (xpsp.080413-2105)	0.37%
5.1.2600.5512 (xpsp.080413-2105)	0.05%
5.1.2600.5512 (xpsp.080413-2105)	0.34%
5.1.2600.5512 (xpsp.080413-2105)	0.01%
5.1.2600.5512 (xpsp.080413-2105)	0.05%
5.1.2600.5512 (xpsp.080413-2105)	0.01%
5.1.2600.5512 (xpsp.080413-2105)	0.01%
5.1.2600.5512 (xpsp.080413-2105)	0.29%
5.1.2600.5512 (xpsp.080413-2105)	0.21%
5.1.2600.5512 (xpsp.080413-2105)	0.01%
5.1.2600.5512 (xpsp.080413-2105)	0.13%
5.1.2600.5512 (xpsp.080413-2105)	0.17%
5.1.2600.5512 (xpsp.080413-2105)	0.01%
17 other versions

Relationships

PE file structure

Show functions

Import table

advapi32.dll

RegSetValueExW, RegQueryValueExW, RegCloseKey, RegCreateKeyW, RegOpenKeyExW, IsTextUnicode, CloseServiceHandle, QueryServiceConfigW, OpenServiceW, OpenSCManagerW

comctl32.dll

CreatePropertySheetPageW, PropertySheetW, CreateStatusWindowW

comdlg32.dll

ReplaceTextW, PageSetupDlgW, PrintDlgExW, FindTextW, ChooseFontW, GetSaveFileNameW, CommDlgExtendedError, GetOpenFileNameW, GetFileTitleW

gdi32.dll

CreateFontIndirectW, SetMapMode, SetViewportExtEx, SetWindowExtEx, LPtoDP, SetBkMode, GetTextMetricsW, SetAbortProc, StartDocW, StartPage, EndPage, AbortDoc, EndDoc, DeleteDC, TextOutW, GetTextExtentPoint32W, CreateDCW, SelectObject, GetTextFaceW, EnumFontsW, GetDeviceCaps, DeleteObject, GetStockObject, GetObjectW

kernel32.dll

FindNLSString, GlobalAlloc, GlobalUnlock, GlobalLock, GetTimeFormatW, GetDateFormatW, GetLocalTime, GetUserDefaultUILanguage, HeapFree, HeapAlloc, GetProcessHeap, GetFileInformationByHandle, InterlockedExchange, FreeLibraryAndExitThread, GetFileAttributesW, Wow64RevertWow64FsRedirection, Wow64DisableWow64FsRedirection, IsWow64Process, GetCurrentProcess, CreateThread, LoadLibraryW, GetModuleFileNameW, CreateFileMappingW, FormatMessageW, MapViewOfFile, MultiByteToWideChar, UnmapViewOfFile, LocalReAlloc, GetACP, DeleteFileW, SetEndOfFile, WideCharToMultiByte, SetLastError, WriteFile, GetLastError, LocalSize, GetFullPathNameW, MulDiv, GetCommandLineW, GetCurrentProcessId, FoldStringW, lstrcmpW, FindFirstFileW, FindClose, HeapSetInformation, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, GetModuleHandleA, SetUnhandledExceptionFilter, GetStartupInfoA, InterlockedCompareExchange, Sleep, LocalLock, LocalUnlock, lstrlenW, GetLocaleInfoW, GlobalFree, lstrcmpiW, SetErrorMode, CreateFileW, ReadFile, CloseHandle, LocalAlloc, InterlockedDecrement, LocalFree, InterlockedIncrement, GetVersionExW, UnhandledExceptionFilter

msvcrt.dll

DllMain

ntdll.dll

WinSqmIncrementDWORD, RtlInitUnicodeString, NtQueryLicenseValue, WinSqmAddToStream

ole32.dll

CoInitializeEx, CoUninitialize, CoTaskMemAlloc, CoCreateInstance, CoTaskMemFree, CoInitialize

shell32.dll

DragAcceptFiles, SHAddToRecentDocs, SHGetFolderPathW, SHCreateItemFromParsingName, ShellExecuteExW, DragQueryFileW, DragFinish, ShellAboutW

shlwapi.dll

PathIsFileSpecW, SHStrDupW

user32.dll

SetActiveWindow, GetKeyboardLayout, PostQuitMessage, DefWindowProcW, GetForegroundWindow, IsIconic, DestroyWindow, MessageBeep, GetWindowPlacement, CharUpperW, RegisterClassExW, LoadImageW, LoadCursorW, SetWindowLongW, LoadAcceleratorsW, GetSystemMenu, SetWindowPlacement, CreateWindowExW, RegisterWindowMessageW, UpdateWindow, InvalidateRect, SetScrollPos, GetWindowTextLengthW, GetWindowLongW, PeekMessageW, EnableWindow, DialogBoxParamW, CreateDialogParamW, GetWindowTextW, SetWindowPos, SetCursor, SetForegroundWindow, FindWindowW, GetSystemMetrics, MoveWindow, SendMessageW, CharNextW, CheckMenuItem, CloseClipboard, IsClipboardFormatAvailable, OpenClipboard, GetMenuState, EnableMenuItem, GetSubMenu, GetClientRect, UnhookWinEvent, GetFocus, GetMenu, MessageBoxW, WinHelpW, GetDlgCtrlID, ChildWindowFromPoint, GetDC, ShowWindow, DrawTextExW, ReleaseDC, LoadIconW, SetWinEventHook, GetMessageW, PostMessageW, IsDialogMessageW, TranslateAcceleratorW, EndDialog, GetDlgItemTextW, SetDlgItemTextW, SetFocus, SetWindowTextW, GetParent, LoadStringW, SendDlgItemMessageW, GetCursorPos, ScreenToClient, TranslateMessage, GetAncestor, DispatchMessageW, SetProcessDPIAware

version.dll

GetFileVersionInfoExW, GetFileVersionInfoSizeExW, VerQueryValueW

winspool.drv

OpenPrinterW, ClosePrinter, GetPrinterDriverW

notepad.exe

Notepad by Microsoft

Remove notepad.exe

Version:	6.1.7600.16385 (win7_rtm.090713-1255)
MD5:	d378bffb70923139d6a4f546864aa61c
SHA1:	f00aa51c2ed8b2f656318fdc01ee1cf5441011a4
SHA256:	c4232ddd4d37b9c0884bd44d8476578c54d7f98d58945728e425736a6a07e102

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is notepad.exe?

Notepad is a simple text editor for Microsoft Windows. It has been included in all versions of Microsoft Windows since Windows 1.0 in 1985. Notepad is a common text-only (plain text) editor. The resulting files—typically saved with the .txt extension—have no format tags or styles.

About notepad.exe (from Microsoft)

“Notepad is a basic text editor you can use for simple documents or for creating Web pages.”

Overview

notepad.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is installed with a couple of know programs including WinRAR 5.00 (32-bit) published by win.rar GmbH and Activation Assistant for the 2007 Microsoft Office suites published by Microsoft Corporation. This version is designed to run on Windows 7 and is compiled as a 32 bit program.

Details

File name:	notepad.exe
Publisher:	Microsoft Corporation
Product name:	Notepad
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\notepad.exe
Original name:	NOTEPAD.EXE.MUI
File version:	6.1.7600.16385 (win7_rtm.090713-1255)
Product version:	6.1.7600.16385
Size:	175.5 KB (179,712 bytes)
Digital DNA
PE subsystem:	Windows GUI
Entropy:	7.121847
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No

More details

Programs

The following programs will install this file

Activation Assistant for the 2007 Microsoft Office suites

Microsoft Corporation

86% remove

The Microsoft Office Activation Assistant (OAA) is a tool that allows customers who have the 2007 Microsoft Office system preinstalled on a new PC to buy a product key or get a key to activate a 60-day trial version of Microsoft Office Professional 2007. After the OAA is installed, the customer can use a desktop icon to obtain a trial product key and find more information about Office Professional 2007.

WinRAR 32-bit

win.rar GmbH

6% remove

WinRAR is a file archiver and data compression utility that supports RAR, and ZIP and can unpack ARJ, LZH, TAR, GZ, ACE, UUE, BZ2, JAR, ISO, EXE and 7z compressed archives. Version 5 uses the RAR5 archive format that cannot be managed by old versions of WinRAR. This format features a maximum 1GB dictionary (only in 64bit version), better multicore support, it removes multimedia, text and itanium binaries special compression algorithms.

Behaviors

Shell open commands

comfile
batfile
piffile
vbefile
VBSFile
scrfile
regfile
jsefile
JSFile
htafile
CERFile
txtfile
scriptletfile
inifile

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.02289785%	0.028634%
Kernel CPU:	0.01655409%	0.013761%
User CPU:	0.00634376%	0.014873%
Kernel CPU time:	1,747,609 ms/min	100,923,805ms/min
CPU cycles:	131,873/sec	17,470,203/sec
Context switches:	7/sec	284/sec
Memory
Private memory:	2.02 MB	21.59 MB
Private (maximum):	6.41 MB
Private (minimum):	5.17 MB
Non-paged memory:	2.02 MB	21.59 MB
Virtual memory:	64.51 MB	140.96 MB
Virtual memory (peak):	73.82 MB	169.69 MB
Working set:	5.14 MB	18.61 MB
Working set (peak):	8.14 MB	37.95 MB
Page faults:	4,201/min	2,039/min
I/O
I/O read transfer:	186 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	0 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	15 Bytes/sec	448.09 KB/min
I/O other operations:	3/sec	1,671/min
Resource allocations
Threads:	2	12
Handles:	222	600
GUI GDI count:	27	103
GUI GDI peak:	39	142
GUI USER count:	20	49
GUI USER peak:	30	71

Process properties

Integrety level:	Medium
Platform:	32-bit
Command lines:	"C:\Windows\System32\notepad.exe" "C:\Windows\System32\notepad.exe" C:\users\user\appdata\local\temp\confidential.txt "C:\Windows\System32\notepad.exe" C:\ \anti virus installer\avg 2013\avg license keys.txt "C:\Windows\System32\notepad.exe" C:\users\ric\downloads\idm files(crack and patch)\internet download manager (idm) v6.12.10.3 full including crack with key [h33t][iahq76]\key.txt "C:\Windows\System32\notepad.exe" C:\users\user\desktop\podatci od panela team optic.txt notepad "C:\Windows\System32\notepad.exe" C:\users\user\documents\ladies.txt (18 more)
Owner:	User
Parent processes:	explorer.exe (Windows Explorer by Microsoft Corporation) chrome.exe (Google Chrome by Google Inc) winrar.exe (WinRAR by win.rar GmbH)

Threads

Averages

notepad.exe (main module)
Total CPU:	0.03530682%	0.272967%
Kernel CPU:	0.02854750%	0.107585%
User CPU:	0.00675933%	0.165382%
CPU cycles:	1,076,722/sec	5,741,424/sec
Context switches:	4/sec	79/sec
Memory:	192 KB	1.16 MB
ntdll.dll
Total CPU:	0.00017251%
Kernel CPU:	0.00008626%
User CPU:	0.00008626%
CPU cycles:	1,124/sec
Memory:	1.23 MB
SHLWAPI.dll
Total CPU:	0.00015002%
Kernel CPU:	0.00008335%
User CPU:	0.00006668%
CPU cycles:	3,353/sec
Memory:	348 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	60.50%
Windows 7 Ultimate	22.50%
Windows 7 Professional	13.00%
Windows Seven Black Edition	1.50%
Windows Vista Home Premium	1.50%
Windows 7 Home Basic	1.00%

Distribution by country

United States installs about 61.50% of Notepad.

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	32.06%
Hewlett-Packard	19.85%
Toshiba	12.98%
Acer	12.21%
ASUS	9.16%
Sony	6.87%
Alienware	2.29%
Samsung	2.29%
GIGABYTE	2.29%

Remove Adware and Spyware Programs, FREE Download!