…I can write a complete, formatted paper for you (e.g., in IEEE or APA style), including:

The designation usually refers to the embedded module system used by Emotet to compartmentalize its malicious functions. In this architecture, the core executable acts as a wrapper, while "em0s" (Email Module / Spam Module) handles the worm-like spreading capabilities and credential harvesting.