» FontExpertReg.exe
Overview
Analysis
File Details

FontExpertReg.exe

FontExpert Activation Utility

Proxima Software

File name:

FontExpertReg.exe

Publisher:

Proxima Software (signed and verified)

Product:

FontExpert Activation Utility

Version:

10.0.0.1

MD5:

5f8cf5b9884938243380b06d8fd66043

SHA-1:

ef5eabca7eb5d074accd2faf6dca61a705b00b4e

SHA-256:

1e9299005ed8dc376bc2167ffe8d431ec3cef126c6ce565b9797e6fb8fa56ffb

Scanner detections:

2 / 68

Status:

Clean (2 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

4/27/2024 2:17:20 AM UTC (today)

Scan engine

Detection

Engine version

Clam AntiVirus

PUA.Packed.ASPack

0.98/17411

Quick Heal

(Suspicious) - DNAScan

8.15.11.00

File size:

285.8 KB (292,640 bytes)

Product version:

10.0.0.1

Original file name:

FontExpertReg.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\fontexpert\fontexpertreg.exe

Digital Signature

Signed by:

Proxima Software

Authority:

The USERTRUST Network

Valid from:

3/19/2008 4:30:00 AM

Valid to:

3/20/2011 4:29:59 AM

Subject:

CN=Proxima Software, O=Proxima Software, STREET="Podolskikh kursantov str, 18-1-559.", L=Moscow, S=Moscow, PostalCode=117545, C=RU

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

00F830A081EC70F52AB825355447285CE3

File PE Metadata

Compilation timestamp:

12/14/2008 7:50:45 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

6144:Awv3Pz9iwdX93/LM+izn+aCP0vdZhhL0MTZXeXhq+vRnw:LL9iaNDM+GWPCZHBAq+vRnw

Entry address:

0x1000

Entry point:

68, 01, B0, 44, 00, E8, 01, 00, 00, 00, C3, C3, 4E, 55, C7, 27, 34, A1, 2A, AD, 70, BC, F6, 10, 80, AA, 52, BD, 55, 58, 75, DA, 39, BE, EB, 2B, 4E, F3, 49, BC, 75, 92, D6, 83, 65, F4, 97, B8, 4C, 35, 91, FD, 08, DB, 17, 6C, B4, FE, 12, 23, 14, DD, C8, B6, 0A, 2B, 5E, F1, 7D, 7F, 3E, 1A, 0C, 96, 54, B7, 77, C7, 4F, 1A, 8C, 85, 5A, 66, 8A, D2, 95, E3, 20, 15, 20, 67, 03, D7, 80, 4F, 35, 5E, B5, F6, 3C, 49, C0, 96, EC, DE, AF, 85, 69, B1, 48, 5C, C5, 17, 4C, 5F, 03, 86, B0, 04, 9D, 8C, BD, 21, 2C, A3, AC, 84... 
[+]

Entropy:

7.8958

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

180.5 KB (184,832 bytes)

Scan FontExpertReg.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.