home

free-emlreader.exe

FREE EML Viewer

This is a setup program which is used to install the application. The file has been seen being downloaded from www.emltopdf.com and multiple other hosts.
Publisher:
FREE EML Viewer

Product:
FREE EML Viewer

Description:
Email Viewer

Version:
4.0

MD5:
8ab0ce8aa17a7e557606eabdbbf93022

SHA-1:
b64cde128f784a1d4fa7452f2961b033b07fbc41

SHA-256:
7626d8cf7f5b59f9e5bc5bae468ab0a48a3e694e627626cf547d3027598a5f4f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 7:54:01 PM UTC  (today)

File size:
2 MB (2,079,744 bytes)

Product version:
4.0.4.1

Copyright:
Copyright © 2011

Trademarks:
All right reserved

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\free-emlreader.exe

File PE Metadata
Compilation timestamp:
3/22/2011 5:49:26 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:aidfSQBG4YAAjCtzUT8mMdmq45I1khXLbl2uXBoQSBITo7hijzA64yMjwUh+6UXE:aPujNlBoIeQI47GMph8Gy

Entry address:
0x17E8D8

Entry point:
55, 8B, EC, 83, C4, F0, B8, 48, BB, 57, 00, E8, A0, 93, E8, FF, E8, 8F, 98, E8, FF, 50, E8, 79, 99, E8, FF, E8, 80, 34, E9, FF, A1, 98, 53, 58, 00, 8B, 00, E8, F8, 5C, F0, FF, A1, 98, 53, 58, 00, 8B, 00, BA, 48, E9, 57, 00, E8, 9F, 57, F0, FF, 8B, 0D, 88, 56, 58, 00, A1, 98, 53, 58, 00, 8B, 00, 8B, 15, 14, A3, 57, 00, E8, E7, 5C, F0, FF, A1, 98, 53, 58, 00, 8B, 00, E8, 13, 5E, F0, FF, E8, 36, 6B, E8, FF, 00, 00, FF, FF, FF, FF, 0B, 00, 00, 00, 4D, 61, 69, 6C, 20, 56, 69, 65, 77, 65, 72, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
1.5 MB (1,560,064 bytes)

The file free-emlreader.exe has been seen being distributed by the following 6 URLs.

http://www.emltopdf.com/.../EML-Viewer.exe

http://f51.softwaretop.net/2107tmp/cf/soft/2014/7/ba/.../eml-viewer_4041.exe

http://c236.y8top.net/2107tmp/cf/soft/2014/7/ba/.../eml-viewer_4041.exe

http://www.downloadcollection.com/downloadredirect.php?idx=126254

http://www.filebuzz.com/.../download.php?id=79456

http://www.emlreader.com/.../free-emlreader.exe

Scan free-emlreader.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.