» FreebieNotes.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

FreebieNotes.exe

Freebie Notes

Maxim Emelyashin (pw-soft.com)

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Freebie Notes’. This file is installed with the program Freebie Notes.

File name:

FreebieNotes.exe

Publisher:

Power Soft (signed by Maxim Emelyashin (pw-soft.com))

Product:

Freebie Notes

Description:

Virtual sticky notes for PC

Version:

3.32.1.2875

MD5:

376063ed8d2ec70f493567eff5c3ca92

SHA-1:

b4503c7aae46fcdede2945a003f29b322ef1e7f7

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

5/4/2024 12:58:54 AM UTC (today)

Scan engine

Detection

Engine version

Comodo Security

Heur.Suspicious

2845

File size:

1 MB (1,067,392 bytes)

Product version:

3.32.1.2875

Original file name:

FreebieNotes.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\power soft\freebie notes\freebienotes.exe

Digital Signature

Signed by:

Maxim Emelyashin (pw-soft.com)

Authority:

The USERTRUST Network

Valid from:

1/21/2009 10:00:00 PM

Valid to:

1/22/2010 9:59:59 PM

Subject:

CN=Maxim Emelyashin (pw-soft.com), O=Maxim Emelyashin (pw-soft.com), STREET=Krupskoi 1B-60, L=Krasnoyarsk, S=NA, PostalCode=660062, C=RU

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

7F08CBF7B42D307ACD38B7B912008D36

File PE Metadata

Compilation timestamp:

10/22/2009 12:51:45 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

5.0

CTPH (ssdeep):

24576:lfLQjZ/jGzcAhxbe5GSZaa6gckqu1/a/z/KJt7i:l4GfJC5cfuOzSJt7i

Entry address:

0x32A4F0

Entry point:

60, BE, 00, B0, 62, 00, 8D, BE, 00, 60, DD, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B... 
[+]

Packer / compiler:

UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:

1024 KB (1,048,576 bytes)

Startup File (User Run)

Registry location:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

Freebie Notes

Command:

"C:\Program Files\power soft\freebie notes\freebienotes.exe"

The file FreebieNotes.exe has been discovered within the following program.

Freebie Notes by Power Soft

Publisher's description - “Freebie Notes is a easy to use reminder for Windows. With Freebie Notes you can create notes displaying on your desktop. Your notes can be displayed immediately after creation or in the certain moments of time.”

www.freebienotes.com/stick-notes/index.html

6% remove it

Scan FreebieNotes.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.