Menu

#63 emailrelay-keygen.exe flagged as suspicious by AV and VirusTotal

v1.0 (example)
open
2
2025-08-28
2025-08-28
George Bica
No

Hello, what is purpose of emailrelay-keygen.exe and also note this EXE is flagged as suspicious. Heuristics AV blocked it when extracting from ZIP archive.

https://www.virustotal.com/gui/file/cec436f860651e514a13e14e9b6c39576f686529017f42474ae3bf00757a1a26

Discussion

  • Graeme Walker

    Graeme Walker - 2025-08-28

    It creates a self-signed X509 certificate so that you can run an SMTP server with TLS, It is run by the emailrelay-setup installer if you check the "enable TLS encryption" checkbox on the "SMTP server" page without specifying a certificate file. If emailrelay-keygen.exe does not exist then you are forced to supply your own certificate file before the "next" button is enabled.

    See also: https://sourceforge.net/p/emailrelay/support-requests/114/

     
    • George Bica

      George Bica - 2025-08-28

      OK, not sure if you can try and re-compile after changing the code a bit to see if it will help with ESET block.

       
  • Graeme Walker

    Graeme Walker - 2025-08-28

    No, I'm not a fan of that game. I've played it before. Some virus scanners, particularly those with "AI" in the name, seem to be just random number generators with a commercially-sponsored whitelist attached. Even if a trivial rebuild passes today then there is no guarantee for tomorrow.

    FYI, for the 2.6 release I used an "air-gapped" Microsoft WinDev VM for the build. The code and all its dependencies are on GitHub https://github.com/graeme-walker/emailrelay-build , in case anyone wants to do their own build. For 2.7 I intend to use the GitHub CI/CD build servers.

     

Log in to post a comment.

Want the latest updates on software, tech news, and AI?
Get latest updates about software, tech news, and AI from SourceForge directly in your inbox once a month.