home

Type1Loader.exe

FontExpert

Proxima Software

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘FontExpertType1Loader’. This is installed with FontExpert 2011 Font Manager.
Publisher:
Proxima Software  (signed and verified)

Product:
FontExpert

Description:
FontExpert Type1Loader

Version:
11.0.0.5

MD5:
d5822c0ddf9b30e44e53096730ccc72b

SHA-1:
f116f6c8a7b002cb98e18111e070599c79edea74

SHA-256:
11dc476a11d03d8d9328a40d8bcbefcfa475eeeaa7f5a504941862b0a1eb2e8f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 9:20:30 AM UTC  (today)

File size:
288.9 KB (295,800 bytes)

Product version:
11.0.0.5

Copyright:
Copyright © 2008-2013, Proxima Software. All rights reserved.

Original file name:
Type1Loader.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\fontexpert\type1loader.exe

Digital Signature
Signed by:
Proxima Software

Authority:
The USERTRUST Network

Valid from:
3/31/2011 4:00:00 AM

Valid to:
3/31/2014 3:59:59 AM

Subject:
CN=Proxima Software, O=Proxima Software, STREET="Podolskikh Kursantov str., 18-1-559.", L=Moscow, S=Moscow, PostalCode=117545, C=RU

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00DE507F71280C3A5D2B6678E0C3C254DE

File PE Metadata
Compilation timestamp:
3/22/2013 12:39:45 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:0J3+NMrc6hJouw3TKsWQpzJqMvZOcwxjrJuf:0wSouw3TN/7vZJLf

Entry address:
0x18E0D

Entry point:
E8, 79, 8B, 00, 00, E9, 78, FE, FF, FF, 6A, 0C, 68, 68, 5C, 43, 00, E8, C1, 0B, 00, 00, 83, 65, E4, 00, 8B, 75, 08, 3B, 35, A8, FB, 43, 00, 77, 22, 6A, 04, E8, 82, 65, 00, 00, 59, 83, 65, FC, 00, 56, E8, 80, 78, 00, 00, 59, 89, 45, E4, C7, 45, FC, FE, FF, FF, FF, E8, 09, 00, 00, 00, 8B, 45, E4, E8, CD, 0B, 00, 00, C3, 6A, 04, E8, 7D, 64, 00, 00, 59, C3, 8B, FF, 55, 8B, EC, 56, 8B, 75, 08, 83, FE, E0, 0F, 87, A1, 00, 00, 00, 53, 57, 8B, 3D, B8, F0, 42, 00, 83, 3D, C0, E3, 43, 00, 00, 75, 18, E8, FB, 81, 00...
 
[+]

Code size:
181 KB (185,344 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
FontExpertType1Loader

Command:
C:\Program Files\fontexpert\type1loader.exe


The file Type1Loader.exe has been discovered within the following program.

FontExpert 2011 Font Manager  by Proxima Software
Publisher's description - “You can display the list of installed font faces, customizable font samples and advanced font properties.”
www.proximasoftware.com/fontexpert
7% remove it
 
Powered by Should I Remove It?

Scan Type1Loader.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.