» FreebieNotes.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

FreebieNotes.exe

Freebie Notes

Maxim Emelyashin (pw-soft.com)

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Freebie Notes’. This is installed with Freebie Notes.

File name:

FreebieNotes.exe

Publisher:

Power Soft (signed by Maxim Emelyashin (pw-soft.com))

Product:

Freebie Notes

Description:

Virtual sticky notes for PC

Version:

3.33.1.3350

MD5:

58ed594b7cc5e54a626908760f5b0ada

SHA-1:

313e6a3183dd4aed1d5408cb5acf15771a42dbff

SHA-256:

b557b458a17f525bceef2db8fd9e0d76ec3876c9cbf0c0b203957ecfe9a89bc1

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 11:22:28 PM UTC (a few moments ago)

File size:

1.2 MB (1,230,720 bytes)

Product version:

3.33.1.3350

Original file name:

FreebieNotes.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States d'America)

Digital Signature

Signed by:

Maxim Emelyashin (pw-soft.com)

Authority:

The USERTRUST Network

Valid from:

1/22/2009 1:00:00 AM

Valid to:

1/23/2010 12:59:59 AM

Subject:

CN=Maxim Emelyashin (pw-soft.com), O=Maxim Emelyashin (pw-soft.com), STREET=Krupskoi 1B-60, L=Krasnoyarsk, S=NA, PostalCode=660062, C=RU

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

7F08CBF7B42D307ACD38B7B912008D36

File PE Metadata

Compilation timestamp:

12/17/2009 11:01:00 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

5.0

CTPH (ssdeep):

24576:EQC7iqV09qZQnq6Cy2FwhDzg9BVwh3pU5eS0XKM5Mf:FCuw6qFFwGwR2/08f

Entry address:

0x383280

Entry point:

60, BE, 00, C0, 65, 00, 8D, BE, 00, 50, DA, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B... 
[+]

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:

1.2 MB (1,212,416 bytes)

Startup File (User Run)

Registry location:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

Freebie Notes

Command:

"C:\programmi-2\freebie notes\freebienotes.exe"

The file FreebieNotes.exe has been discovered within the following program.

Freebie Notes by Power Soft

Publisher's description - “Freebie Notes is a easy to use reminder for Windows. With Freebie Notes you can create notes displaying on your desktop. Your notes can be displayed immediately after creation or in the certain moments of time.”

www.freebienotes.com/stick-notes/index.html

6% remove it

Scan FreebieNotes.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.