home

pssetupfontexpert2016v14.exe

Proxima Software Setup

Limited Liability Company

The application pssetupfontexpert2016v14.exe by Limited Liability Company has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup and installation application and has been known to bundle potentially unwanted software. This is the uninstaller utility registered in the Windows Control Panel for the program FontExpert 2016 Font Manager by Proxima Software.
Publisher:
Limited Liability Company   (signed and verified)

Product:
Proxima Software Setup

Version:
4, 0, 0, 3

MD5:
21f8ac0f282af0371aa7d4aa17004ee3

SHA-1:
5526d803d3122f316a6ee82e01fba8d6865acd18

SHA-256:
07a6ddb1c56442b2651a5d7428f71c56fbf66d8d0217c553d196416e0bac689d

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/26/2024 6:53:54 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.ITVA (M)
17.2.27.1

File size:
4.8 MB (5,047,040 bytes)

Product version:
4, 0, 0, 3

Copyright:
Copyright © 1992-2017 Proxima Software.

Original file name:
pssetup.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\fontexpert\pssetupfontexpert2016v14.exe

Digital Signature
Signed by:
Limited Liability Company

Authority:
COMODO CA Limited

Valid from:
11/3/2015 2:00:00 AM

Valid to:
11/3/2018 1:59:59 AM

Subject:
CN="Limited Liability Company ""Proxima SFT""", O="Limited Liability Company ""Proxima SFT""", STREET=Podolskikh Kursantov Street, STREET=18-1-559, L=Moscow, S=Moscow, PostalCode=113545, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00E15E6E25105D1DF08E664E64AF6CE3CA

File PE Metadata
Compilation timestamp:
12/18/2016 1:58:39 PM

OS version:
6.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
14.0

Entry address:
0x2A13A8

Entry point:
48, 83, EC, 28, E8, 63, 10, 00, 00, 48, 83, C4, 28, E9, 32, FE, FF, FF, CC, CC, 48, 83, EC, 28, 4D, 8B, 41, 38, 48, 8B, CA, 49, 8B, D1, E8, 0D, 00, 00, 00, B8, 01, 00, 00, 00, 48, 83, C4, 28, C3, CC, CC, CC, 40, 53, 45, 8B, 18, 48, 8B, DA, 41, 83, E3, F8, 4C, 8B, C9, 41, F6, 00, 04, 4C, 8B, D1, 74, 13, 41, 8B, 40, 08, 4D, 63, 50, 04, F7, D8, 4C, 03, D1, 48, 63, C8, 4C, 23, D1, 49, 63, C3, 4A, 8B, 14, 10, 48, 8B, 43, 10, 8B, 48, 08, 48, 03, 4B, 08, F6, 41, 03, 0F, 74, 0A, 0F, B6, 41, 03, 83, E0, F0, 4C, 03...
 
[+]

Code size:
3.1 MB (3,281,408 bytes)

Program Uninstaller
Program name:
FontExpert 2016 Font Manager

Display publisher:
Proxima Software

Display version:
14.0.0.1

Uninstall string:
C:\Program Files\FontExpert\pssetupFontExpert2016v14.exe /u psuninstFontExpert2016v14.inf


Remove pssetupfontexpert2016v14.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.