home

efo.exe

EasyFileOpener

PCVARK SOFTWARE PRIVATE LIMITED

The application efo.exe by PCVARK SOFTWARE PRIVATE LIMITED has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
PCVARK SOFTWARE PRIVATE LIMITED  (signed and verified)

Product:
EasyFileOpener

Version:
1.0.0.0

MD5:
25507bbe18b5b72571419d05d363c32e

SHA-1:
0cfcb9fde7890270de48118d4d6c5d14a42a04ff

SHA-256:
942bab88adc65b745075886a776940cec2a38eedb6e0b47faa8f4217e8730607

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
12/21/2025 1:35:14 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.PCVark.EFO (L)
16.10.6.17

File size:
47.6 KB (48,760 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2015

Original file name:
efo.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\roaming\easyfileopener\efo.exe

Digital Signature
Signed by:
PCVARK SOFTWARE PRIVATE LIMITED

Authority:
Symantec Corporation

Valid from:
6/8/2015 3:00:00 AM

Valid to:
6/8/2016 2:59:59 AM

Subject:
CN=PCVARK SOFTWARE PRIVATE LIMITED, OU=Tech, O=PCVARK SOFTWARE PRIVATE LIMITED, L=Jaipur, S=Rajasthan, C=IN, SERIALNUMBER=047363, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.3=IN

Issuer:
CN=Symantec Class 3 Extended Validation Code Signing CA - G2, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
58D13858D2E7BC50E2E42ABF763827E1

File PE Metadata
Compilation timestamp:
6/16/2015 4:24:33 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
768:lDgKTmc6RAfaWyPlXxAaNTQENg6RGdOGddU72RVl2B8w9sjGauv:lFQYmPlXxAaxNgkDSVl2B8+sVuv

Entry address:
0x7502

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.5282

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
21.5 KB (22,016 bytes)

Remove efo.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.