» FontExpertReg.exe
Overview
Analysis
File Details

FontExpertReg.exe

TODO:

Proxima Software

File name:

FontExpertReg.exe

Publisher:

TODO: <Company name> (signed by Proxima Software)

Product:

TODO: <Product name>

Description:

TODO: <File description>

Version:

1.0.0.1

MD5:

a400d5c34ce26beb816702361bc44a9c

SHA-1:

e9485b7e4568703670f2219c675cfb8a17c04b64

SHA-256:

dda2f7457212187821d158feecc943e0a8475701dea24c7a919c8ef8a758f34e

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/15/2024 1:25:01 AM UTC (today)

File size:

243.4 KB (249,280 bytes)

Product version:

1.0.0.1

Original file name:

FontExpertReg.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\fontexpert\fontexpertreg.exe

Digital Signature

Signed by:

Proxima Software

Authority:

VeriSign, Inc.

Valid from:

3/22/2007 4:30:00 AM

Valid to:

3/22/2008 4:29:59 AM

Subject:

CN=Proxima Software, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Proxima Software, L=Moscow, S=Moscow, C=RU

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

102D38CDEE4E289D7B6FE513CE2C90E7

File PE Metadata

Compilation timestamp:

10/22/2007 4:43:42 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

6144:E6UWlDZJtZF5sjDacr6U9WnwvP6bQ7yMP+DE8273Lk:E6vrzsjj6U8Y6b7MP+Dd2/k

Entry address:

0x1000

Entry point:

68, 01, 70, 44, 00, E8, 01, 00, 00, 00, C3, C3, 3F, 2B, 6E, 2D, 46, C4, 16, 04, CB, 93, 65, D6, 2E, 91, 76, 21, DA, 2D, FC, FA, 71, 53, A7, 9C, 6E, B7, CE, 60, 40, BC, 9D, 13, EF, A8, 1E, A2, 45, 41, 3D, 85, A5, 9B, 20, 28, FA, 57, 4A, 6E, C4, 00, 89, AC, 1E, FA, 7B, B1, 29, 20, CB, 5C, 91, 5D, 72, E5, 43, F5, 04, 42, 2C, C3, 1C, 1A, 35, 75, 23, 92, 86, 53, 00, 13, 21, 48, 66, BE, 17, EB, C2, 1D, 3C, 76, D5, B9, 14, 18, 25, 68, C8, 9A, A3, 48, 02, 7D, 03, 8D, 08, 6F, 33, 99, 64, EE, 96, 71, C1, 3F, 25, 0A... 
[+]

Entropy:

7.8314

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

172 KB (176,128 bytes)

Scan FontExpertReg.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.