Should I block it?

No, this file is 100% safe to run.

Additional versions

6.3.9600.16384 (winblue_rtm.130821-1623)	3.49%
6.3.9600.16384 (winblue_rtm.130821-1623)	0.11%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.19%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.01%
6.2.9200.16384 (win8_rtm.120725-1247)	2.08%
6.2.9200.16384 (win8_rtm.120725-1247)	12.12%
6.2.8400.0 (winmain_win8rc.120518-1423)	0.05%
6.2.8400.0 (winmain_win8rc.120518-1423)	0.05%
6.2.8250.0 (winmain_win8beta.120217-1520)	0.01%
6.2.8102.0 (winmain_win8m3.110823-1455)	0.05%
6.1.7600.16385 (win7_rtm.090713-1255)	21.49%
6.1.7600.16385 (win7_rtm.090713-1255)	38.43%
6.1.7600.16385 (win7_rtm.090713-1255)	0.01%
6.1.7600.16385 (win7_rtm.090713-1255)	0.01%
6.1.7600.16385 (win7_rtm.090713-1255)	0.01%
6.1.7600.16385 (win7_rtm.090713-1255)	0.01%
6.1.7600.16385 (win7_rtm.090713-1255)	0.01%
6.1.7600.16385 (win7_rtm.090713-1255)	0.01%
6.1.7600.16385 (win7_rtm.090713-1255)	0.01%
6.1.7600.16385 (win7_rtm.090713-1255)	0.09%
6.1.7600.16385 (win7_rtm.090713-1255)	0.01%
6.1.7600.16385 (win7_rtm.090713-1255)	0.05%
6.0.6000.16386 (vista_rtm.061101-2205)	5.70%
6.0.6000.16386 (vista_rtm.061101-2205)	1.58%
6.0.6000.16386 (vista_rtm.061101-2205)	0.45%
View more
5.2.3790.3959 (srv03_sp2_rtm.070216-1710)	0.01%
5.2.3790.1830 (srv03_sp1_rtm.050324-1447)	0.05%
5.1.2600.5877 (xpsp_sp3_qfe.090916-1338)	0.01%
5.1.2600.5877 (xpsp_sp3_qfe.090916-1338)	0.33%
5.1.2600.5877 (xpsp_sp3_qfe.090916-1338)	0.01%
5.1.2600.5877 (xpsp_sp3_qfe.090916-1338)	0.01%
5.1.2600.5877 (xpsp_sp3_qfe.090916-1338)	0.01%
5.1.2600.5512 (xpsp.080413-2105)	9.39%
5.1.2600.5512 (xpsp.080413-2105)	0.05%
5.1.2600.5512 (xpsp.080413-2105)	0.05%
5.1.2600.5512 (xpsp.080413-2105)	0.05%
5.1.2600.5512 (xpsp.080413-2105)	0.01%
5.1.2600.5512 (xpsp.080413-2105)	0.01%
5.1.2600.5512 (xpsp.080413-2105)	0.37%
5.1.2600.5512 (xpsp.080413-2105)	0.05%
5.1.2600.5512 (xpsp.080413-2105)	0.34%
5.1.2600.5512 (xpsp.080413-2105)	0.01%
5.1.2600.5512 (xpsp.080413-2105)	0.05%
5.1.2600.5512 (xpsp.080413-2105)	0.01%
5.1.2600.5512 (xpsp.080413-2105)	0.01%
5.1.2600.5512 (xpsp.080413-2105)	0.29%
5.1.2600.5512 (xpsp.080413-2105)	0.21%
5.1.2600.5512 (xpsp.080413-2105)	0.01%
5.1.2600.5512 (xpsp.080413-2105)	0.13%
5.1.2600.5512 (xpsp.080413-2105)	0.17%
5.1.2600.5512 (xpsp.080413-2105)	0.01%
17 other versions

Relationships

PE file structure

Show functions

Import table

advapi32.dll

RegSetValueExW, RegQueryValueExW, RegCloseKey, RegCreateKeyW, RegOpenKeyExW, IsTextUnicode, CloseServiceHandle, QueryServiceConfigW, OpenServiceW, OpenSCManagerW

comctl32.dll

CreatePropertySheetPageW, PropertySheetW, CreateStatusWindowW

comdlg32.dll

ReplaceTextW, PageSetupDlgW, PrintDlgExW, FindTextW, ChooseFontW, GetSaveFileNameW, CommDlgExtendedError, GetOpenFileNameW, GetFileTitleW

gdi32.dll

CreateFontIndirectW, SetMapMode, SetViewportExtEx, SetWindowExtEx, LPtoDP, SetBkMode, GetTextMetricsW, SetAbortProc, StartDocW, StartPage, EndPage, AbortDoc, EndDoc, DeleteDC, TextOutW, GetTextExtentPoint32W, CreateDCW, SelectObject, GetTextFaceW, EnumFontsW, GetDeviceCaps, DeleteObject, GetStockObject, GetObjectW

kernel32.dll

FindNLSString, GlobalAlloc, GlobalUnlock, GlobalLock, GetTimeFormatW, GetDateFormatW, GetLocalTime, GetUserDefaultUILanguage, HeapFree, HeapAlloc, GetProcessHeap, GetFileInformationByHandle, InterlockedExchange, FreeLibraryAndExitThread, GetFileAttributesW, Wow64RevertWow64FsRedirection, Wow64DisableWow64FsRedirection, IsWow64Process, GetCurrentProcess, CreateThread, LoadLibraryW, GetModuleFileNameW, CreateFileMappingW, FormatMessageW, MapViewOfFile, MultiByteToWideChar, UnmapViewOfFile, LocalReAlloc, GetACP, DeleteFileW, SetEndOfFile, WideCharToMultiByte, SetLastError, WriteFile, GetLastError, LocalSize, GetFullPathNameW, MulDiv, GetCommandLineW, GetCurrentProcessId, FoldStringW, lstrcmpW, FindFirstFileW, FindClose, HeapSetInformation, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, GetModuleHandleA, SetUnhandledExceptionFilter, GetStartupInfoA, InterlockedCompareExchange, Sleep, LocalLock, LocalUnlock, lstrlenW, GetLocaleInfoW, GlobalFree, lstrcmpiW, SetErrorMode, CreateFileW, ReadFile, CloseHandle, LocalAlloc, InterlockedDecrement, LocalFree, InterlockedIncrement, GetVersionExW, UnhandledExceptionFilter

msvcrt.dll

DllMain

ntdll.dll

WinSqmIncrementDWORD, RtlInitUnicodeString, NtQueryLicenseValue, WinSqmAddToStream

ole32.dll

CoInitializeEx, CoUninitialize, CoTaskMemAlloc, CoCreateInstance, CoTaskMemFree, CoInitialize

shell32.dll

DragAcceptFiles, SHAddToRecentDocs, SHGetFolderPathW, SHCreateItemFromParsingName, ShellExecuteExW, DragQueryFileW, DragFinish, ShellAboutW

shlwapi.dll

PathIsFileSpecW, SHStrDupW

user32.dll

SetActiveWindow, GetKeyboardLayout, PostQuitMessage, DefWindowProcW, GetForegroundWindow, IsIconic, DestroyWindow, MessageBeep, GetWindowPlacement, CharUpperW, RegisterClassExW, LoadImageW, LoadCursorW, SetWindowLongW, LoadAcceleratorsW, GetSystemMenu, SetWindowPlacement, CreateWindowExW, RegisterWindowMessageW, UpdateWindow, InvalidateRect, SetScrollPos, GetWindowTextLengthW, GetWindowLongW, PeekMessageW, EnableWindow, DialogBoxParamW, CreateDialogParamW, GetWindowTextW, SetWindowPos, SetCursor, SetForegroundWindow, FindWindowW, GetSystemMetrics, MoveWindow, SendMessageW, CharNextW, CheckMenuItem, CloseClipboard, IsClipboardFormatAvailable, OpenClipboard, GetMenuState, EnableMenuItem, GetSubMenu, GetClientRect, UnhookWinEvent, GetFocus, GetMenu, MessageBoxW, WinHelpW, GetDlgCtrlID, ChildWindowFromPoint, GetDC, ShowWindow, DrawTextExW, ReleaseDC, LoadIconW, SetWinEventHook, GetMessageW, PostMessageW, IsDialogMessageW, TranslateAcceleratorW, EndDialog, GetDlgItemTextW, SetDlgItemTextW, SetFocus, SetWindowTextW, GetParent, LoadStringW, SendDlgItemMessageW, GetCursorPos, ScreenToClient, TranslateMessage, GetAncestor, DispatchMessageW, SetProcessDPIAware

version.dll

GetFileVersionInfoExW, GetFileVersionInfoSizeExW, VerQueryValueW

winspool.drv

OpenPrinterW, ClosePrinter, GetPrinterDriverW

notepad.exe

Notepad by Microsoft

Remove notepad.exe

Version:	6.1.7600.16385 (win7_rtm.090713-1255)
MD5:	f2c7bb8acc97f92e987a2d4087d021b1
SHA1:	7eb0139d2175739b3ccb0d1110067820be6abd29
SHA256:	142e1d688ef0568370c37187fd9f2351d7ddeda574f8bfa9b0fa4ef42db85aa2

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is notepad.exe?

Notepad is a simple text editor for Microsoft Windows. It has been included in all versions of Microsoft Windows since Windows 1.0 in 1985. Notepad is a common text-only (plain text) editor. The resulting files—typically saved with the .txt extension—have no format tags or styles.

About notepad.exe (from Microsoft)

“Notepad is a basic text editor you can use for simple documents or for creating Web pages.”

Overview

notepad.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. This version is designed to run on Windows 7 and is compiled as a 64 bit program.

Details

File name:	notepad.exe
Publisher:	Microsoft Corporation
Product name:	Notepad
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\notepad.exe
Original name:	NOTEPAD.EXE.MUI
File version:	6.1.7600.16385 (win7_rtm.090713-1255)
Product version:	6.1.7600.16385
Size:	189 KB (193,536 bytes)
Digital DNA
PE subsystem:	Windows GUI
Entropy:	7.121847
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No

More details

Behaviors

Shell open commands

comfile
batfile
piffile
vbefile
VBSFile
scrfile
regfile
jsefile
JSFile
htafile
CERFile
txtfile
scriptletfile
inifile

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00046187%	0.028634%
Kernel CPU:	0.00030376%	0.013761%
User CPU:	0.00015810%	0.014873%
Kernel CPU time:	883,829 ms/min	100,923,805ms/min
CPU cycles:	131,993/sec	17,470,203/sec
Context switches:	5/sec	284/sec
Memory
Private memory:	3.42 MB	21.59 MB
Private (maximum):	7.74 MB
Private (minimum):	4.37 MB
Non-paged memory:	3.42 MB	21.59 MB
Virtual memory:	84.06 MB	140.96 MB
Virtual memory (peak):	97.06 MB	169.69 MB
Working set:	5.18 MB	18.61 MB
Working set (peak):	10.4 MB	37.95 MB
Page faults:	18,189/min	2,039/min
I/O
I/O read transfer:	18 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	9 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	77 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	1	12
Handles:	89	600
GUI GDI count:	30	103
GUI GDI peak:	50	142
GUI USER count:	20	49
GUI USER peak:	38	71

Process properties

Integrety level:	Medium
Platform:	64-bit
Command lines:	"C:\Windows\System32\notepad.exe" "C:\Windows\System32\notepad.exe" C:\___info\_!__appointments.txt "C:\Windows\System32\notepad.exe" C:\___info\__)_____________pw.txt "C:\Windows\System32\notepad.exe" C:\users\user\documents\fdfd.txt "C:\Windows\System32\notepad.exe" C:\users\dell 2011 inspirion\dropbox\nred, hoover complaint\nac to study for hearing.txt "C:\windows\notepad.exe" "C:\users\user\appdata\roaming\malwarebytes\malwarebytes' anti-malware\logs\mbam-log-2013-06-16 (21-09-46).txt" "C:\Windows\System32\notepad.exe" C:\users\user\desktop\email address.txt (18 more)
Owner:	User
Parent processes:	explorer.exe (Windows Explorer by Microsoft Corporation) mbam.exe (Malwarebytes Anti-Malware by Malwarebytes Corporation)

Threads

Averages

notepad.exe (main module)
Total CPU:	0.00303116%	0.272967%
Kernel CPU:	0.00225440%	0.107585%
User CPU:	0.00077676%	0.165382%
CPU cycles:	110,271/sec	5,741,424/sec
Context switches:	1/sec	79/sec
Memory:	212 KB	1.16 MB
SHLWAPI.dll
Total CPU:	0.00007120%
Kernel CPU:	0.00003436%
User CPU:	0.00003684%
CPU cycles:	5,982/sec
Memory:	452 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	60.50%
Windows 7 Ultimate	22.50%
Windows 7 Professional	13.00%
Windows Seven Black Edition	1.50%
Windows Vista Home Premium	1.50%
Windows 7 Home Basic	1.00%

Distribution by country

United States installs about 61.50% of Notepad.

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	32.06%
Hewlett-Packard	19.85%
Toshiba	12.98%
Acer	12.21%
ASUS	9.16%
Sony	6.87%
Alienware	2.29%
Samsung	2.29%
GIGABYTE	2.29%

Remove Adware and Spyware Programs, FREE Download!