home

fontexpert.exe

FontExpert

Limited Liability Company

The application fontexpert.exe by Limited Liability Company has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Proxima Software  (signed by Limited Liability Company )

Product:
FontExpert

Version:
14,0,0,1

MD5:
67f2ca1d8a97f63857e2794ab0524c1c

SHA-1:
43497fb454a563c9dd45aa801749f8a9bdff5034

SHA-256:
65069aa2cbb63609ff30c956b3d8eb75eb431df7808838e060cb644c78acbbcb

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/26/2024 6:55:01 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.ITVA (M)
17.2.16.10

File size:
5 MB (5,274,384 bytes)

Product version:
14,0,0,1

Copyright:
Copyright © 1999-2016 Proxima Software

Trademarks:
FontExpert is a registered trademark of Proxima Software.

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\fontexpert\fontexpert.exe

Digital Signature
Signed by:
Limited Liability Company

Authority:
COMODO CA Limited

Valid from:
11/3/2015 3:30:00 AM

Valid to:
11/3/2018 3:29:59 AM

Subject:
CN="Limited Liability Company ""Proxima SFT""", O="Limited Liability Company ""Proxima SFT""", STREET=Podolskikh Kursantov Street, STREET=18-1-559, L=Moscow, S=Moscow, PostalCode=113545, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00E15E6E25105D1DF08E664E64AF6CE3CA

File PE Metadata
Compilation timestamp:
10/24/2016 2:26:07 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0xBED1B8

Entry point:
EB, 08, 00, 26, 07, 00, 00, 00, 00, 00, EB, 04, 96, EC, 43, B2, EB, 51, 0C, 69, 45, 48, 89, 1C, 24, EB, 01, 4C, BB, AE, 15, 00, 00, EB, 02, 01, 7C, E9, 0B, 02, 00, 00, EB, 02, 45, 1B, 8B, 06, EB, 03, 4F, BD, D4, 44, 8B, 5E, 04, EB, 03, B8, A7, 3E, 41, BC, 20, 37, EF, C6, EB, 03, 64, 6B, 9F, 41, B8, 20, 00, 00, 00, EB, 01, 7C, 4C, 8B, 36, EB, 02, 6B, C8, EB, 6F, E3, 93, CB, EB, 03, E8, 39, E8, 41, 54, EB, 02, 81, D0, 48, 83, EC, 50, EB, 01, 0A, 48, 89, 4C, 24, 60, EB, 01, 47, 48, 89, 54, 24, 68, EB, 02, 19...
 
[+]

Entropy:
7.9773  (probably packed)

Code size:
7.2 MB (7,581,356 bytes)

Remove fontexpert.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.