home

EmailCaddieNotifications.exe

EmailCaddieNotifications

STANDSS (SOUTH PACIFIC) LIMITED

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘EmailCaddieNotifications’.
Publisher:
STANDSS (SOUTH PACIFIC) LIMITED  (signed and verified)

Product:
EmailCaddieNotifications

Version:
1.0.5898.32322

MD5:
87c4f11e7cc9ec768afd381b35ee19bd

SHA-1:
167f6a84cc248c459cddb9f85405d5d3939beb15

SHA-256:
34a2bddfd96eb3a84fbd58285315a15f50c9ecac3050d5483b6ff2dc8102b1a5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/6/2024 11:18:28 AM UTC  (today)

File size:
162.2 KB (166,112 bytes)

Product version:
1.0.5898.32322

Copyright:
Copyright © 2015

Original file name:
EmailCaddieNotifications.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\standss\emailcaddie for outlook (32 bit)\emailcaddienotifications.exe

Digital Signature
Signed by:
STANDSS (SOUTH PACIFIC) LIMITED

Authority:
COMODO CA Limited

Valid from:
2/23/2016 4:00:00 PM

Valid to:
7/3/2017 4:59:59 PM

Subject:
CN=STANDSS (SOUTH PACIFIC) LIMITED, O=STANDSS (SOUTH PACIFIC) LIMITED, STREET=Lot 73 Gordon Street, STREET=Government Buildings, L=Suva, S=00, PostalCode=00, C=FJ

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
24BBD3B0C09D7D51FCCA993C9FEF7550

File PE Metadata
Compilation timestamp:
2/23/2016 9:08:16 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:jcj9Q3UkqZLyn7nOe4R4hTRaUsrXpLQlgS+yM+:jcj9Q3UkqZa7OAhTRa+j

Entry address:
0x27FAE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, C0, 3A, CD, 56, 00, 00, 00, 00, 02, 00, 00, 00, 8C, 00, 00, 00, 1C, 80, 02, 00, 1C, 64, 02, 00, 52, 53, 44, 53, BC, 6C, 31, BC, 73, 01, 78, 42, 97, 32, 05, 76, 8B, 21...
 
[+]

Entropy:
5.6880

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
152 KB (155,648 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
EmailCaddieNotifications

Command:
C:\Program Files\standss\emailcaddie for outlook (32 bit)\emailcaddienotifications.exe


Scan EmailCaddieNotifications.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.