» FreebieNotes.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

FreebieNotes.exe

Freebie Notes

Maxim Emelyashin (pw-soft.com)

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Freebie Notes’. This is installed with Freebie Notes.

File name:

FreebieNotes.exe

Publisher:

Power Soft (signed by Maxim Emelyashin (pw-soft.com))

Product:

Freebie Notes

Description:

Virtual sticky notes for PC

Version:

3.34.1.3395

MD5:

5af0b1f0bd63d8e8b74204ffcf6ded2a

SHA-1:

a3413beb064ee18841d4c66182742f31f4447ecf

SHA-256:

1175f6ff6a97cfdcd3a2f79c3168a333da8891f0199db1b82bc01c4fffecb59b

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/16/2024 4:15:10 PM UTC (today)

File size:

1.2 MB (1,226,008 bytes)

Product version:

3.34.1.3395

Original file name:

FreebieNotes.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\power soft\freebie notes\freebienotes.exe

Digital Signature

Signed by:

Maxim Emelyashin (pw-soft.com)

Authority:

The USERTRUST Network

Valid from:

1/19/2010 3:00:00 AM

Valid to:

1/20/2012 2:59:59 AM

Subject:

CN=Maxim Emelyashin (pw-soft.com), O=Maxim Emelyashin (pw-soft.com), STREET=Krupskoi 1B-60, L=Krasnoyarsk, S=NA, PostalCode=660062, C=RU

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

5305A7E2FFFABD627439D02215DB04FC

File PE Metadata

Compilation timestamp:

2/8/2010 12:36:47 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

5.0

CTPH (ssdeep):

24576:3+o3L3/XF24/P1JXY83hheNMRsy0ABK70XU5IBefVYtKd8j2L1LC:3D7N2WCGzPBKEUpZN1+

Entry address:

0x386660

Entry point:

60, BE, 00, 00, 66, 00, 8D, BE, 00, 10, DA, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B... 
[+]

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:

1.2 MB (1,208,320 bytes)

Startup File (User Run)

Registry location:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

Freebie Notes

Command:

"C:\Program Files\power soft\freebie notes\freebienotes.exe"

The file FreebieNotes.exe has been discovered within the following program.

Freebie Notes by Power Soft

Publisher's description - “Freebie Notes is a easy to use reminder for Windows. With Freebie Notes you can create notes displaying on your desktop. Your notes can be displayed immediately after creation or in the certain moments of time.”

www.freebienotes.com/stick-notes/index.html

6% remove it

Scan FreebieNotes.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.