home

foxitprevhost.exe

FoxitPrevhost.exe

Foxit Corporation

Publisher:
Foxit Corporation  (signed and verified)

Product:
FoxitPrevhost.exe

Description:
Foxit PDF Preview Handler Host

Version:
1.0.0.1

MD5:
552e54d4c47f6d6879a347290f198bed

SHA-1:
dfd3fca344810a2e796d9e8c1151843a926debcf

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/23/2024 10:59:09 AM UTC  (today)

Scan engine
Detection
Engine version

Clam AntiVirus
Win.Worm.Brontok-88
0.98/23207

File size:
127 KB (130,048 bytes)

Product version:
1.0.0.1

Copyright:
Copyright (C) 2005-2010 Foxit Corporation.

Original file name:
PDFPreviewHandlerHost.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\foxit software\foxit reader\shell extensions\foxitprevhost.exe

Digital Signature
Signed by:
Foxit Corporation

Authority:
GoDaddy.com, Inc.

Valid from:
5/3/2010 11:33:52 PM

Valid to:
5/3/2013 11:33:52 PM

Subject:
CN=Foxit Corporation, O=Foxit Corporation, L=Fremont, S=CA, C=US

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
64A7A038A7B2

File PE Metadata
Compilation timestamp:
11/9/2001 12:14:08 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0x245E2

Entry point:
83, 3C, 24, FE, 77, FE, 8D, 64, 24, CC, 60, B8, 13, B8, D2, B0, 83, EC, DC, E8, 07, FE, FF, FF, 83, F9, 31, 4B, 66, 4B, 9B, 75, FB, 3C, E5, 39, C0, FE, C2, FF, 73, 3C, 59, 40, FE, C2, 90, 81, E9, FD, FF, FF, 7F, E9, D4, FE, FF, FF, 8B, 79, 17, 8B, 04, 1F, 42, 83, C7, 04, 8D, 74, 18, FD, 3B, 51, 0F, FC, 0F, 83, 98, 00, 00, 00, FE, C8, 53, 83, C3, CB, 51, 33, C0, 0F, B6, 4E, 03, 6B, C0, 0F, B7, A0, 83, EE, EE, 30, E7, 2B, C1, F6, D3, 8D, 76, EF, 80, 7E, 03, 0A, 73, E5, 04, 00, 09, D6, 46, 33, 44, 24, 0C, 80...
 
[+]

Entropy:
6.8174

Code size:
52 KB (53,248 bytes)

Approved Shell Extension
Name:
Foxit PDF Preview Provider (XP)

CLSID:
{1B96FAD8-1C10-416E-8027-6EFF94045F6F}

CLSID name:
FoxitPDFPreviewHandlerHost Class


Scan foxitprevhost.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.