home

FreebieNotes.exe

Freebie Notes

Maxim Emelyashin

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Freebie Notes’. This file is installed with the program Freebie Notes.
Publisher:
Power Soft  (signed by Maxim Emelyashin)

Product:
Freebie Notes

Version:
3.54.1.4470

MD5:
7c17c8f8ef7c1f41cef4aafa6977c0e4

SHA-1:
f2214b6cd80666277a0ea6800f931896ad35fd90

SHA-256:
a99500253b78042e7776f07a68aba125e8881addf7027b375f83f497114de00a

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/26/2024 1:29:24 AM UTC  (today)

Scan engine
Detection
Engine version

Comodo Security
Heur.Suspicious
18073

File size:
5.9 MB (6,230,192 bytes)

Product version:
3.54.1.4470

Original file name:
FreebieNotes.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\power soft\freebie notes\freebienotes.exe

Digital Signature
Signed by:
Maxim Emelyashin

Authority:
COMODO CA Limited

Valid from:
1/10/2012 1:00:00 AM

Valid to:
1/10/2015 12:59:59 AM

Subject:
CN=Maxim Emelyashin, O=Maxim Emelyashin, STREET=Krupskoi 1B-60, L=Krasnoyarsk, S=NA, PostalCode=660062, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00F2AB57344199D331EDBB29D4BB13230D

File PE Metadata
Compilation timestamp:
2/5/2013 8:00:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
98304:zJy/UfvDOJcq9WDxlMfD45OgVXIil6KDyV687HISVxwXZe0oEzPoqHoqVxvLBrBg:zVOJcq9WDxlMfD45OgVXIil6KDyV687X

Entry address:
0x2320

Entry point:
EB, 10, 66, 62, 3A, 43, 2B, 2B, 48, 4F, 4F, 4B, 90, E9, AC, 60, 82, 00, A1, 9F, 60, 82, 00, C1, E0, 02, A3, A3, 60, 82, 00, 52, 6A, 00, E8, CD, 28, 42, 00, 8B, D0, E8, FE, 26, 41, 00, 5A, E8, 20, 26, 41, 00, E8, 4F, 28, 41, 00, 6A, 00, E8, B4, 45, 41, 00, 59, 68, 48, 60, 82, 00, 6A, 00, E8, A7, 28, 42, 00, A3, A7, 60, 82, 00, 6A, 00, E9, 37, E0, 41, 00, E9, E6, 45, 41, 00, 33, C0, A0, 91, 60, 82, 00, C3, A1, A7, 60, 82, 00, C3, 60, BB, 00, 50, B0, BC, 53, 68, AD, 0B, 00, 00, C3, B9, F0, 00, 00, 00, 0B, C9...
 
[+]

Code size:
4.1 MB (4,345,856 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Freebie Notes

Command:
"C:\Program Files\power soft\freebie notes\freebienotes.exe"


The file FreebieNotes.exe has been discovered within the following program.

Freebie Notes  by Power Soft
Publisher's description - “Freebie Notes is a easy to use reminder for Windows. With Freebie Notes you can create notes displaying on your desktop. Your notes can be displayed immediately after creation or in the certain moments of time.”
www.freebienotes.com/stick-notes/index.html
6% remove it
 
Powered by Should I Remove It?

Scan FreebieNotes.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.