home

edm business.exe

Zhengji Li

Publisher:
1and1Soft  (signed by Zhengji Li)

Description:
1and1 Mail

Version:
4.6.0.588

MD5:
421c70cdfa41dd45584196f91400a0b9

SHA-1:
1f66961d948b029304f1585db24c6fd7c1fef131

SHA-256:
c3c3603ed8b33b7798189817b7d59685f129436f739f6dfedfdd9d48b07aa77d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
6/26/2025 5:16:59 AM UTC  (today)

File size:
16.9 MB (17,717,088 bytes)

Product version:
4.6

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\1and1mail\edm business.exe

Digital Signature
Signed by:
Zhengji Li

Authority:
WoSign CA Limited

Valid from:
9/16/2015 10:48:16 AM

Valid to:
9/16/2016 10:48:16 AM

Subject:
CN=Zhengji Li, E=424467198@qq.com, L=Shijiazhuang, S=Hebei, C=CN

Issuer:
CN=WoSign Class 2 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:
42C1B1B9BF5EAE9BD77D07732BB41675

File PE Metadata
Compilation timestamp:
3/24/2016 3:14:03 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:4i7HKrnBNLmexQn3MId9I/XqI42Yw8sW866MQ:tHKrnBNLmexQn3y3PFW86W

Entry address:
0xC16E2C

Entry point:
55, 8B, EC, 83, C4, E8, 53, 56, 57, 33, C0, 89, 45, E8, 89, 45, EC, B8, 2C, 9F, FF, 00, E8, 91, 8F, 3F, FF, 33, C0, 55, 68, 91, 70, 01, 01, 64, FF, 30, 64, 89, 20, C6, 05, A8, A8, 16, 01, 01, 33, DB, E8, 79, 81, CC, FF, A1, AC, 96, 03, 01, C6, 00, 00, E8, 04, 00, 3F, FF, 8B, F0, 85, F6, 7C, 43, 46, 33, FF, 8D, 55, EC, 8B, C7, E8, 51, 00, 3F, FF, 8B, 45, EC, BA, AC, 70, 01, 01, E8, C4, 4A, 3F, FF, 75, 08, A1, AC, 96, 03, 01, C6, 00, 01, 8D, 55, E8, 8B, C7, E8, 30, 00, 3F, FF, 8B, 45, E8, BA, C4, 70, 01, 01...
 
[+]

Entropy:
6.7615

Developed / compiled with:
Microsoft Visual C++

Code size:
12.1 MB (12,669,952 bytes)

Scan edm business.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.