» fontexpert.exe
Overview
Analysis
File Details
Programs (1)

fontexpert.exe

FontExpert 2015

Limited Liability Company

The application fontexpert.exe by Limited Liability Company has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program FontExpert 2015 Font Manager by Proxima Software.

File name:

fontexpert.exe

Publisher:

Proxima Software (signed by Limited Liability Company )

Product:

FontExpert 2015

Version:

13,0,0,2

MD5:

485425460028df2641ae376695b08083

SHA-1:

f7d6eb9294a40a3b1bcf19d060d202d9f4cf092f

SHA-256:

87eb84ccbe2d0a66c734b7805068ea404f29b65db2d75d6df6afa3e651a65329

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

11/14/2024 6:53:17 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.ITVA.LimitedLiabilityCompany (M)

16.1.31.18

File size:

3.8 MB (3,956,272 bytes)

Product version:

13,0,0,2

Trademarks:

FontExpert is a registered trademark of Proxima Software.

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\fontexpert\fontexpert.exe

Digital Signature

Signed by:

Limited Liability Company

Authority:

COMODO CA Limited

Valid from:

11/3/2015 2:00:00 AM

Valid to:

11/3/2018 1:59:59 AM

Subject:

CN="Limited Liability Company ""Proxima SFT""", O="Limited Liability Company ""Proxima SFT""", STREET=Podolskikh Kursantov Street, STREET=18-1-559, L=Moscow, S=Moscow, PostalCode=113545, C=RU

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00E15E6E25105D1DF08E664E64AF6CE3CA

File PE Metadata

Compilation timestamp:

1/23/2016 12:37:43 PM

OS version:

6.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

98304:F7tIjvr2JzwN2XpbOAu1oLZApOKfKv/EgPostlGabdB:FpIjCwMXpbO5oLZ8fK3EgdQMf

Entry address:

0x904000

Entry point:

EB, 08, 00, DE, 06, 00, 00, 00, 00, 00, EB, 03, F0, 20, 89, 50, EB, 05, 8B, 89, 9A, E8, A3, E8, 19, 00, 00, 00, EB, 04, F1, 0E, B1, 56, EB, 05, 69, C6, 08, F6, 9F, 33, C0, EB, 03, FE, A2, 8A, 71, 59, EB, 01, 28, EB, 02, C6, 12, B8, 31, 48, 14, F7, EB, 01, 36, EB, 05, 1B, BA, FA, C1, 72, 05, CF, B7, EB, 08, EB, 04, F7, B4, 12, 48, 75, 36, EB, 04, 00, B4, 82, B9, 64, FF, 30, EB, 01, 08, 64, 89, 20, EB, 01, E4, EB, 04, 65, C0, 43, D2, 8B, 10, EB, 02, 02, 8B, 64, 8F, 00, EB, 01, 03, 83, C4, 04, EB, 04, F1, FB... 
[+]

Code size:

5.4 MB (5,667,328 bytes)

The file fontexpert.exe has been discovered within the following program.

FontExpert 2015 Font Manager by Proxima Software

www.proximasoftware.com/fontexpert

About 1% of users remove it

Remove fontexpert.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.