home

Evil FOCA.exe

Evil FOCA

Informatica 64 S.L.

Publisher:
Informatica64  (signed by Informatica 64 S.L.)

Product:
Evil FOCA

Version:
0.1.2.0

MD5:
09a11413d1cef10f8a957a08e526956f

SHA-1:
e889ab0314f7a4058c8d4c2e5c07ed6e4ff24195

SHA-256:
7d0282f2605473f74acc2a8e3bfc41ced993ea0001e8326d826a8b3daf188110

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/16/2024 6:20:31 PM UTC  (today)

File size:
1.3 MB (1,405,128 bytes)

Product version:
0.1.2.0

Copyright:
Informatica64 S.L.

Original file name:
Evil FOCA.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\informatica64\evil foca\evil foca.exe

Digital Signature
Signed by:
Informatica 64 S.L.

Authority:
StartCom Ltd.

Valid from:
10/23/2011 6:05:03 AM

Valid to:
10/23/2013 10:35:49 PM

Subject:
E=i64@informatica64.com, CN=Informatica 64 S.L., O=Informatica 64 S.L., L=Mostoles, S=Madrid, C=ES, Description=545685-6QaL1u9VL8GswZUq

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
046A

File PE Metadata
Compilation timestamp:
4/4/2013 2:07:42 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
24576:tBJgMaoPW/5udqNXGDRmf/lehyGEWkEX8sru++BwPeD4/zf:X+Mao+0dqVGA/lehyYX8sSZBwmU/z

Entry address:
0x14EEDE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
1.3 MB (1,363,968 bytes)

Scan Evil FOCA.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.