» fontexpert.exe
Overview
Analysis
File Details
Programs (1)

fontexpert.exe

FontExpert 2015

Limited Liability Company

The application fontexpert.exe by Limited Liability Company has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program FontExpert 2015 Font Manager by Proxima Software.

File name:

fontexpert.exe

Publisher:

Proxima Software (signed by Limited Liability Company )

Product:

FontExpert 2015

Version:

13,0,0,1

MD5:

2210e83f0fda8dfd4bd5c850dc0945ee

SHA-1:

fbb9ec223b1440887bf393aa6cd9c54f767b92cc

SHA-256:

62a09d95a120f1a8a61ca39917528e7b63182738609da4e9d76e5606627ee719

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

11/26/2024 5:16:30 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.ITVA (M)

16.12.8.21

File size:

3.8 MB (3,955,952 bytes)

Product version:

13,0,0,1

Trademarks:

FontExpert is a registered trademark of Proxima Software.

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\fontexpert\fontexpert.exe

Digital Signature

Signed by:

Limited Liability Company

Authority:

COMODO CA Limited

Valid from:

10/27/2014 3:30:00 AM

Valid to:

10/28/2015 3:29:59 AM

Subject:

CN="Limited Liability Company ""Proxima SFT""", O="Limited Liability Company ""Proxima SFT""", STREET=Podolskikh Kursantov Street, STREET=18-1-559, L=Moscow, S=Moscow, PostalCode=117545, C=RU

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

4BA63201E321418FF839AA5A0634222F

File PE Metadata

Compilation timestamp:

9/26/2015 10:40:31 AM

OS version:

6.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

98304:yVvT0p/ljZzUZi2JGrDQwKRiVuI92nTlUtnD:yVvTs/ljZzweDQy9CStnD

Entry address:

0x904000

Entry point:

EB, 08, 00, DE, 06, 00, 00, 00, 00, 00, EB, 03, 03, B4, 50, 50, EB, 05, D8, 95, DA, 56, 85, E8, 19, 00, 00, 00, EB, 04, 35, 92, 12, 3B, EB, 05, 10, 84, 2E, 68, 71, 33, C0, EB, 03, E9, 64, 32, 71, 59, EB, 01, 69, EB, 02, BD, 76, B8, 31, 48, 06, F7, EB, 01, 85, EB, 05, C5, AB, B8, 2B, 20, 05, CF, B7, F9, 08, EB, 04, C6, 4A, 1B, 18, 75, 36, EB, 04, 25, 30, 67, 91, 64, FF, 30, EB, 01, BA, 64, 89, 20, EB, 01, CA, EB, 04, 20, A7, 2D, AD, 8B, 10, EB, 02, 33, A7, 64, 8F, 00, EB, 01, 6B, 83, C4, 04, EB, 04, 11, B0... 
[+]

Entropy:

7.9643 (probably packed)

Code size:

5.4 MB (5,665,792 bytes)

The file fontexpert.exe has been discovered within the following program.

FontExpert 2015 Font Manager by Proxima Software

www.proximasoftware.com/fontexpert

About 1% of users remove it

Remove fontexpert.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.