» FontExpertReg.exe
Overview
Analysis
File Details
Programs (1)

FontExpertReg.exe

FontExpert Activation Utility

Proxima Software

This file is installed with the program FontExpert 2011 Font Manager.

File name:

FontExpertReg.exe

Publisher:

Proxima Software (signed and verified)

Product:

FontExpert Activation Utility

Version:

11.0.0.1

MD5:

a2e2ee9bd478467d1af15103915f9628

SHA-1:

6aa79e47a71be781fcd0d111426fb1dec46e3e1e

SHA-256:

cbe36e8de8f6c00c44965245541f123a23ff49f3cc6f481048b0967a48f907a6

Scanner detections:

3 / 68

Status:

Clean (3 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

4/26/2024 12:10:35 PM UTC (today)

Scan engine

Detection

Engine version

Rising Antivirus

PE:Malware.XPACK-HIE/Heur!1.9C48

23.00.65.14903

Trend Micro House Call

Possible_Virus

7.2.248

Trend Micro

Possible_Virus

10.465.05

File size:

326 KB (333,808 bytes)

Product version:

11.0.0.1

Original file name:

FontExpertReg.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\fontexpert\fontexpertreg.exe

Digital Signature

Signed by:

Proxima Software

Authority:

The USERTRUST Network

Valid from:

3/30/2011 5:00:00 PM

Valid to:

3/30/2014 4:59:59 PM

Subject:

CN=Proxima Software, O=Proxima Software, STREET="Podolskikh Kursantov str., 18-1-559.", L=Moscow, S=Moscow, PostalCode=117545, C=RU

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

00DE507F71280C3A5D2B6678E0C3C254DE

File PE Metadata

Compilation timestamp:

11/4/2011 1:41:34 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

6144:C5Jt5eSKmlaJfglMRiTbMQwhnGZSXmI1mPUSUpF0GDa+mY+c2inUGNPWBEPx:C5gbmOfghYhdXmIomgcas+xmUoPWIx

Entry address:

0x54000

Entry point:

EB, 05, EF, A1, D3, 2E, 2D, 50, EB, 02, 9E, 51, E8, 1B, 00, 00, 00, EB, 05, 33, B9, 89, 31, 8E, EB, 05, 82, 7D, 87, 2B, 67, 33, C0, EB, 04, CC, 90, 5B, EC, 71, 5C, EB, 01, A1, EB, 03, 3A, 98, B2, B8, 05, 48, 90, F6, EB, 01, FE, EB, 03, 4A, F0, A5, 05, FB, B7, 6F, 09, EB, 03, 39, CF, 2B, 75, 3B, EB, 02, 15, 12, 64, FF, 30, EB, 01, 9C, 64, 89, 20, EB, 04, DA, A2, 78, EA, EB, 01, 5A, 8B, 10, EB, 02, 9B, 82, 64, 8F, 00, EB, 03, F2, 2E, BC, 83, C4, 04, EB, 02, 31, 5F, 58, EB, 05, 6F, B6, 76, 76, 37, C3, EB, 05... 
[+]

Entropy:

7.9672 (probably packed)

Code size:

182.5 KB (186,880 bytes)

The file FontExpertReg.exe has been discovered within the following program.

FontExpert 2011 Font Manager by Proxima Software

Publisher's description - “You can display the list of installed font faces, customizable font samples and advanced font properties.”

www.proximasoftware.com/fontexpert

7% remove it

Scan FontExpertReg.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.