» fontexpert.exe
Overview
Analysis
File Details
Programs (1)

fontexpert.exe

FontExpert 2015

Limited Liability Company

The application fontexpert.exe by Limited Liability Company has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program FontExpert 2015 Font Manager by Proxima Software.

File name:

fontexpert.exe

Publisher:

Proxima Software (signed by Limited Liability Company )

Product:

FontExpert 2015

Version:

13,0,0,1

MD5:

2e8c0659e1d4e98694bccfa4c970a35f

SHA-1:

4c80248c525e566d6b14890c01bacf714b23c480

SHA-256:

04b396a355123fa0a532f059c940c161b2a08881ca6c299721844f113839b0de

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

11/26/2024 5:22:28 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.ITVA.LimitedLiabilityCompany (M)

16.1.12.17

File size:

3.8 MB (3,956,144 bytes)

Product version:

13,0,0,1

Trademarks:

FontExpert is a registered trademark of Proxima Software.

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\temp\fontexpert.exe

Digital Signature

Signed by:

Limited Liability Company

Authority:

COMODO CA Limited

Valid from:

10/27/2014 1:00:00 AM

Valid to:

10/28/2015 12:59:59 AM

Subject:

CN="Limited Liability Company ""Proxima SFT""", O="Limited Liability Company ""Proxima SFT""", STREET=Podolskikh Kursantov Street, STREET=18-1-559, L=Moscow, S=Moscow, PostalCode=117545, C=RU

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

4BA63201E321418FF839AA5A0634222F

File PE Metadata

Compilation timestamp:

10/7/2015 8:07:24 PM

OS version:

6.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

98304:v1EFY94HgL42ZA1nrEY3mmI0DnbX7ryke:v1EO94C42ZGgzsn77ryP

Entry address:

0x904000

Entry point:

EB, 08, 00, DE, 06, 00, 00, 00, 00, 00, EB, 03, 15, 92, B6, 50, EB, 05, C7, EB, E4, A9, F7, E8, 19, 00, 00, 00, EB, 04, 0B, A9, F6, 35, EB, 05, 1A, 85, DD, 0A, 9B, 33, C0, EB, 03, C4, 54, 27, 71, 59, EB, 01, 34, EB, 02, 83, 27, B8, 31, 48, 3D, F7, EB, 01, F6, EB, 05, 83, BF, 1E, 83, 5A, 05, CF, B7, C2, 08, EB, 04, 0D, D8, D3, 62, 75, 36, EB, 04, 28, 8B, 19, 91, 64, FF, 30, EB, 01, D0, 64, 89, 20, EB, 01, 28, EB, 04, 8E, 92, 99, 26, 8B, 10, EB, 02, C6, F9, 64, 8F, 00, EB, 01, BE, 83, C4, 04, EB, 04, BD, 46... 
[+]

Code size:

5.4 MB (5,665,792 bytes)

The file fontexpert.exe has been discovered within the following program.

FontExpert 2015 Font Manager by Proxima Software

www.proximasoftware.com/fontexpert

About 1% of users remove it

Remove fontexpert.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.