Skip to content

A C# light executable that read Windows 11 Notes from TabState directory.

License

Notifications You must be signed in to change notification settings

n3rada/SharpNotesReader

Repository files navigation

SharpNotesReader

SharpNotesReader is a tool designed to extract unsaved notes from Windows 11's Notepad (Notepad.exe) session files. This feature allows quick-typed notes to persist even after the application is closed and reopened later. This tool lets you retrieve and read those unsaved files, providing insight into the hidden "TabState" files Notepad uses.

Many users rely on Notepad for tasks like quickly jotting down passwords or short notes:

notes

With a bit of trickery and a few lines of code, you can look into the stored note data located at %localAppData%\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\LocalState\TabState and extract the content:

example

Build Instruction

Open the solution (.sln) file with Visual Studio, and build the solution (F7). Executable will be located at SharpNotesReader\bin\Release\SharpNotesReader.exe.

In-Memory

Since disk is as "floor is lava", the binaries produced using C# are, by their inherent design, de facto in-memory executables. This characteristic makes them highly versatile and powerful for stealthy execution without touching the disk.