home

foxitreader.exe

Foxit Reader

Foxit Software Incorporated

This is installed with multiple programs including Foxit PhantomPDF Business and Foxit Reader. The file has been seen being downloaded from doc-08-ak-docs.googleusercontent.com.
Publisher:
Foxit Software Inc.  (signed by Foxit Software Incorporated)

Product:
Foxit Reader

Description:
Foxit Reader 7.0, Best Reader for Everyday Use!

Version:
7,0,3, 916

MD5:
5f85dfa22c11c48b56f58473a335da2c

SHA-1:
573b32d27a19a23fbc37cb97469ba45594edc455

SHA-256:
d426c77eab8bb07dda22d41f61898e6a65ec20084543827b2896bc0a7e6dd9bd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/30/2024 10:33:32 AM UTC  (today)

File size:
40.1 MB (42,093,280 bytes)

Product version:
7.0.3.916

Copyright:
Copyright © 2004-2014 Foxit Software Inc. All Rights Reserved.

Original file name:
Foxit Reader.EXE

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\foxit software\foxit reader\foxitreader.exe

Digital Signature
Signed by:
Foxit Software Incorporated

Authority:
DigiCert Inc

Valid from:
9/5/2014 1:00:00 AM

Valid to:
11/9/2015 12:00:00 PM

Subject:
CN=Foxit Software Incorporated, O=Foxit Software Incorporated, L=Fremont, S=California, C=US, PostalCode=94538, STREET=42840 Christy Street, STREET=Suite 201, SERIALNUMBER=C3105953, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=US, OID.2.5.4.15=Private Organization

Issuer:
CN=DigiCert EV Code Signing CA (SHA2), OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0EA14639547A83EA1E75BAF79B854CB4

File PE Metadata
Compilation timestamp:
9/17/2014 3:28:39 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
786432:4RlOcmRSHtOHzfnqCYHOqDVftVP9pU95xl:4RldmUHtOTfnwHDhftq

Entry address:
0x6F35CC

Entry point:
E8, DA, DF, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 53, 8B, 45, 0C, 83, C0, 0C, 89, 45, FC, 64, 8B, 1D, 00, 00, 00, 00, 8B, 03, 64, A3, 00, 00, 00, 00, 8B, 45, 08, 8B, 5D, 0C, 8B, 6D, FC, 8B, 63, FC, FF, E0, 5B, C9, C2, 08, 00, 58, 59, 87, 04, 24, FF, E0, 58, 59, 87, 04, 24, FF, E0, 58, 59, 87, 04, 24, FF, E0, 8B, FF, 55, 8B, EC, 51, 51, 53, 56, 57, 64, 8B, 35, 00, 00, 00, 00, 89, 75, FC, C7, 45, F8, 48, 36, AF, 00, 6A, 00, FF, 75, 0C, FF, 75, F8, FF, 75, 08, E8, 8A, 54, 03, 00, 8B, 45, 0C, 8B...
 
[+]

Entropy:
6.6655

Code size:
23.9 MB (25,047,552 bytes)

The file foxitreader.exe has been discovered within the following programs.

Foxit PhantomPDF Business  by Foxit Corporation
Publisher's description - “Robust for the needs of enterprises, Foxit PhantomPDF Business delivers a feature rich solution with the quality, security, deployability, and support essential for enterprise requirements.”
www.foxitsoftware.com/Secure_PDF_Security
About 3% of users remove it
Foxit PhantomPDF Standard  by Foxit Corporation
Publisher's description - “Foxit PhantomPDF Standard delivers the right features at the right price to deliver professional looking PDF documents. It is available in English, Dutch, French, German, Italian, Portuguese, Russian, and Spanish.”
www.foxitsoftware.com/PDF_Editor
About 2% of users remove it
Foxit Reader  by Foxit Software Inc.
www.foxitsoftware.com
About 9% of users remove it
 
Powered by Should I Remove It?

The file foxitreader.exe has been seen being distributed by the following URL.

https://doc-08-ak-docs.googleusercontent.com/docs/securesc/1m3lh6b58ni9k74jlol5030ange76ghr/alvm389ltp0qdu4gk4pkhaqrmnpuki58/1461772800000/.../12466897719172109419/0BxWcdhkLqNNSWU5tVWd2eWFWY2s?h=04095883703498977833&e=download

Scan foxitreader.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.