» FontExpertReg.exe
Overview
Analysis
File Details
Programs (1)

FontExpertReg.exe

FontExpert Activation Utility

Proxima Software

This file is installed with the program FontExpert 2011 Font Manager.

File name:

FontExpertReg.exe

Publisher:

Proxima Software (signed and verified)

Product:

FontExpert Activation Utility

Version:

11.0.0.5

MD5:

cf0a10f7e9a0cfcc2e88b5b62c4f5da7

SHA-1:

34791539eaf373cd15c87fd40152b63ede8ce701

SHA-256:

131cf0ca1a0de885f5de1e5569ef760139e90ae9a001c5fa71a73b705906b2bf

Scanner detections:

3 / 68

Status:

Clean (3 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

4/25/2024 6:28:48 AM UTC (today)

Scan engine

Detection

Engine version

Rising Antivirus

PE:Malware.XPACK-HIE/Heur!1.9C48

23.00.65.141110

Trend Micro House Call

Possible_Virus

7.2.316

Trend Micro

Possible_Virus

10.465.12

File size:

339.9 KB (348,096 bytes)

Product version:

11.0.0.5

Original file name:

FontExpertReg.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\fontexpert\fontexpertreg.exe

Digital Signature

Signed by:

Proxima Software

Authority:

The USERTRUST Network

Valid from:

3/31/2011 4:00:00 AM

Valid to:

3/31/2014 3:59:59 AM

Subject:

CN=Proxima Software, O=Proxima Software, STREET="Podolskikh Kursantov str., 18-1-559.", L=Moscow, S=Moscow, PostalCode=117545, C=RU

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

00DE507F71280C3A5D2B6678E0C3C254DE

File PE Metadata

Compilation timestamp:

3/22/2013 12:39:56 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

6144:MgtfTjkJluVdfG0TRIkih6uXneHQV1undsuX3H3AZ2dNKFbvsJRa7XHMVNzG6:lFYubuYIkaOHo1ud7XnAZSN0bvGw3Mv3

Entry address:

0x54000

Entry point:

EB, 04, 1D, 43, 99, D9, 50, EB, 01, 39, E8, 1B, 00, 00, 00, EB, 03, F6, 87, 1B, EB, 04, 68, 85, 7F, E6, 33, C0, EB, 05, 8F, 79, B5, 1D, 95, 71, 5C, EB, 03, 15, DA, B7, EB, 01, EA, B8, 0A, 48, F7, F6, EB, 04, BE, 0A, 00, 99, EB, 01, B1, 05, F6, B7, 08, 09, EB, 02, BB, C9, 75, 3B, EB, 05, 67, F0, EA, A5, 08, 64, FF, 30, EB, 01, B4, 64, 89, 20, EB, 02, 0D, BE, EB, 03, 15, 32, CF, 8B, 10, EB, 03, 18, AE, 45, 64, 8F, 00, EB, 03, 21, 96, 00, 83, C4, 04, EB, 02, 0F, 72, 58, EB, 04, A2, FF, F3, B8, C3, EB, 02, C1... 
[+]

Code size:

182.5 KB (186,880 bytes)

The file FontExpertReg.exe has been discovered within the following program.

FontExpert 2011 Font Manager by Proxima Software

Publisher's description - “You can display the list of installed font faces, customizable font samples and advanced font properties.”

www.proximasoftware.com/fontexpert

7% remove it

Scan FontExpertReg.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.