» FreebieNotes.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

FreebieNotes.exe

Freebie Notes

Maxim Emelyashin (pw-soft.com)

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Freebie Notes’. This is installed with Freebie Notes.

File name:

FreebieNotes.exe

Publisher:

Power Soft (signed by Maxim Emelyashin (pw-soft.com))

Product:

Freebie Notes

Description:

Virtual sticky notes for PC

Version:

3.31.1.2855

MD5:

a0c151c6b5d24437b2b581e11239f011

SHA-1:

881e7e3880fdf0ba08355b068bfcc7d04a0d7fe1

SHA-256:

bb0e182b9ed6757a02d7ce2ee51dbc396da7510e02a510a167859e09c48aa464

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/20/2024 1:15:44 AM UTC (today)

File size:

1 MB (1,067,392 bytes)

Product version:

3.31.1.2855

Original file name:

FreebieNotes.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\power soft\freebie notes\freebienotes.exe

Digital Signature

Signed by:

Maxim Emelyashin (pw-soft.com)

Authority:

The USERTRUST Network

Valid from:

1/22/2009 1:00:00 AM

Valid to:

1/23/2010 12:59:59 AM

Subject:

CN=Maxim Emelyashin (pw-soft.com), O=Maxim Emelyashin (pw-soft.com), STREET=Krupskoi 1B-60, L=Krasnoyarsk, S=NA, PostalCode=660062, C=RU

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

7F08CBF7B42D307ACD38B7B912008D36

File PE Metadata

Compilation timestamp:

9/17/2009 6:08:25 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

5.0

CTPH (ssdeep):

24576:MNOfqE1Z8HXd1WsBtx1mAEWUPiY1YFznEVvHru:lkNJBtJdULEnAu

Entry address:

0x32A3F0

Entry point:

60, BE, 00, B0, 62, 00, 8D, BE, 00, 60, DD, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B... 
[+]

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:

1024 KB (1,048,576 bytes)

Startup File (User Run)

Registry location:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

Freebie Notes

Command:

"C:\Program Files\power soft\freebie notes\freebienotes.exe"

The file FreebieNotes.exe has been discovered within the following program.

Freebie Notes by Power Soft

Publisher's description - “Freebie Notes is a easy to use reminder for Windows. With Freebie Notes you can create notes displaying on your desktop. Your notes can be displayed immediately after creation or in the certain moments of time.”

www.freebienotes.com/stick-notes/index.html

6% remove it

Scan FreebieNotes.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.