home

foxit reader.exe

Foxit Reader Setup

Foxit Corporation

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from lb.cdn.m6web.fr and multiple other hosts.
Publisher:
Foxit Corporation   (signed by Foxit Corporation)

Product:
Foxit Reader Setup

Version:
6.1.4.217

MD5:
733c231e20e8281dc9085ae827597584

SHA-1:
dabf7136c12f046453104fabc648308bf824130d

SHA-256:
f9266967572ae587fab8f0b991de997bfbc4ffaaf3e1f24745a3ddfcd1f071b9

Scanner detections:
2 / 68

Status:
Inconclusive  (probably just false positive detections)

Analysis date:
4/25/2024 10:16:47 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/OpenCandy (variant)
8.9476

Reason Heuristics
PUP.OpenCandy.Installer (L)
16.11.29.10

File size:
31.9 MB (33,488,656 bytes)

Product version:
6.1.4.217

Copyright:
Copyright © 2005-2014 Foxit Corporation

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\appdata\local\temp\foxit reader.exe

Digital Signature
Signed by:
Foxit Corporation

Authority:
Starfield Technologies, Inc.

Valid from:
5/3/2013 8:56:10 AM

Valid to:
5/3/2016 9:33:52 PM

Subject:
CN=Foxit Corporation, O=Foxit Corporation, L=Fremont, S=CA, C=US

Issuer:
SERIALNUMBER=10688435, CN=Starfield Secure Certification Authority, OU=http://certificates.starfieldtech.com/repository, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
04430E53296BF1

File PE Metadata
Compilation timestamp:
4/10/2010 5:57:59 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
786432:saZEUGsRVdPjkDMSiLE4oh4vk+hhHLJktmcELQm5VoWQUn5:hSUGmPPjMMJJock+hlJktmcELQWLJ

Entry address:
0x163C4

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 54, 55, 41, 00, E8, 70, 04, FF, FF, 33, C0, 55, 68, 91, 6A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 4D, 6A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, AB, 41, 00, E8, A6, EF, FF, FF, E8, B1, EA, FF, FF, 8D, 55, EC, 33, C0, E8, FB, 87, FF, FF, 8B, 55, EC, B8, B0, D6, 41, 00, E8, A6, EA, FE, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, B0, D6, 41, 00, B2, 01...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
85 KB (87,040 bytes)

The file foxit reader.exe has been discovered within the following program.

360Amigo System Speedup Free  by 360Amigo
360Amigo is registry optimizer. 360Amigo System Speedup bundles a branded version of the Conduit Toolbar, designed to deliver search based advertising and results. During installation the user is presented in some cases with the option to install the toolbar (on by default).
www.360amigo.com
53% remove it
 
Powered by Should I Remove It?

The file foxit reader.exe has been seen being distributed by the following 50 URLs.

http://lb.cdn.m6web.fr/d/c/a/a12607e88dcb734069171e62fdd97647/53540e50/soft/.../foxit-reader_6-1-4_fr_13808.exe

http://www.foxitsoftware.com/.../latest.php?product=Foxit-Reader&platform=Windows

http://cdn01.foxitsoftware.com/pub/foxit/reader/desktop/win/3.x/3.3/.../FoxitReader331_enu.msi

http://darmoweprogramy.pl/.../FoxitReader614.0217_enu_Setup.exe

http://www.foxitsoftware.com/.../latest.php?product=Foxit-Reader

http://share2.earthlinktele.com/download.aspx?file=1227917271&sig=MTAvMTIvMjAxNiAwMTo0NDoxNw==

http://lb.cdn.m6web.fr/d/c/a/f9f08d53052e824a0a71acd85da26fc3/5344647f/soft/.../foxit-reader_6-1-4_fr_13808.exe

https://doc-0k-08-docs.googleusercontent.com/docs/securesc/62ioai8h3dtotoeintq15au17rm0eiir/8t6ddh3h0kciomqj3habc3qrdkuup3e2/1462327200000/05882812908269271570/.../0BzrXkYUxMH6xSnB3X3BNTE5Wd3c?e=download

http://lms.irc.ac.ir/file.php/1/.../Foxit.Reader.6.1.4.0217_Soft98.iR.exe

http://cdn04.foxitsoftware.com/pub/foxit/reader/desktop/win/6.x/6.0/.../FoxitReader603.0524_enu_Setup.exe

http://data.merapi.net/.../FoxitReader614.0217_enu_Setup.exe

http://lb.cdn.m6web.fr/d/c/a/01da6bc0f5bc674d323002db4691e17f/53139196/soft/.../foxit-reader_6-1-4_fr_13808.exe

http://srv2.cinehub24.com/.../86024-59914-FoxitReader614.0217_enu_Setup.exe

http://cdn01.foxitsoftware.com/pub/foxit/reader/desktop/win/6.x/6.1/.../FoxitReader612.1224_enu_Setup.exe

http://cdn04.foxitsoftware.com/pub/foxit/reader/desktop/win/5.x/5.1/.../FoxitReader514.0104_enu_Setup.exe

http://cdn01.foxitsoftware.com/pub/foxit/reader/desktop/win/6.x/6.1/.../FoxitReader611.1031_enu_Setup.exe

http://esd.baixaki.com.br/programas/.../62-FoxitReader614.0217_enu_Setup.exe

http://foxit-reader.softonic.com.br/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANbshhcW968Q8N/.../0

http://www.commentcamarche.net/download/.../telecharger-205-foxit-reader

http://software.thaiware.com/download_url.php?id=10701

http://cdn01.foxitsoftware.com/pub/foxit/reader/desktop/win/4.x/4.3/.../FoxitReader431_enu_Setup.exe

http://f4f7ff66.flofcoredis.com/crawled_soft/3/.../39378-674533-foxit-pdf-reader.exe

ftp://ftp.makito.com.br/var/ftp/Utilitarios/.../FoxitReader614.0217_enu_Setup.exe

http://cdn01.foxitsoftware.com/pub/foxit/reader/desktop/win/6.x/6.1/.../FoxitReader615.0624_prom_L10N_Setup.exe

http://cdn04.foxitsoftware.com/pub/foxit/reader/desktop/win/6.x/6.1/.../FoxitReader615.0624_prom_L10N_Setup.exe

http://www.filepuma.com/down/1396002075c5225/foxit_reader_6.1.4.0217/.../0/

http://www.filepuma.com/file/1396002075c5225/foxit_reader_6.1.4.0217/.../0/

http://fs33.filehippo.com/8639/.../FoxitReader614.0217_enu_Setup.exe

http://cdn01.foxitsoftware.com/pub/foxit/reader/desktop/win/4.x/4.1/.../FoxitReader411_enu_Setup.exe

http://www.filepuma.com/down/1394469573c5225/foxit_reader_6.1.4.0217/.../0/

Latest 30 of 66 download URLs

Scan foxit reader.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.