» FreebieNotes.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

FreebieNotes.exe

Freebie Notes

Maxim Emelyashin (pw-soft.com)

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Freebie Notes’. This file is installed with the program Freebie Notes.

File name:

FreebieNotes.exe

Publisher:

Power Soft (signed by Maxim Emelyashin (pw-soft.com))

Product:

Freebie Notes

Description:

Virtual sticky notes for PC

Version:

3.25.1.2645

MD5:

d29d90c03e7bb4b38a0c2f8c77ae3173

SHA-1:

36cc05d566b7430a50f011b92e209b36fece1988

SHA-256:

9c909e313ec55e2750f5d93045e704bf24fabdff74c494c5dbc201b98fdf2d09

Scanner detections:

2 / 68

Status:

Clean (2 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

4/26/2024 11:37:42 PM UTC (a few moments ago)

Scan engine

Detection

Engine version

Trend Micro House Call

TROJ_Gen.8V800

7.2.326

Trend Micro

TROJ_Gen.8V800

10.465.21

File size:

1 MB (1,051,008 bytes)

Product version:

3.25.1.2645

Original file name:

FreebieNotes.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\power soft\freebie notes\freebienotes.exe

Digital Signature

Signed by:

Maxim Emelyashin (pw-soft.com)

Authority:

The USERTRUST Network

Valid from:

1/22/2009 5:30:00 AM

Valid to:

1/23/2010 5:29:59 AM

Subject:

CN=Maxim Emelyashin (pw-soft.com), O=Maxim Emelyashin (pw-soft.com), STREET=Krupskoi 1B-60, L=Krasnoyarsk, S=NA, PostalCode=660062, C=RU

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

7F08CBF7B42D307ACD38B7B912008D36

File PE Metadata

Compilation timestamp:

3/17/2009 7:15:58 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

5.0

CTPH (ssdeep):

24576:CmbJb01dPijl2li2IlstqsjdqL93YFhVc/ab7xs:CmbePogpIlubqL93YFhVcO7xs

Entry address:

0x3206E0

Entry point:

60, BE, 00, 50, 62, 00, 8D, BE, 00, C0, DD, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B... 
[+]

Entropy:

7.9151

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:

1008 KB (1,032,192 bytes)

Startup File (User Run)

Registry location:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

Freebie Notes

Command:

"C:\Program Files\power soft\freebie notes\freebienotes.exe"

The file FreebieNotes.exe has been discovered within the following program.

Freebie Notes by Power Soft

Publisher's description - “Freebie Notes is a easy to use reminder for Windows. With Freebie Notes you can create notes displaying on your desktop. Your notes can be displayed immediately after creation or in the certain moments of time.”

www.freebienotes.com/stick-notes/index.html

6% remove it

Scan FreebieNotes.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.