Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

9.47 6.25%
9.45 31.25%
9.35 6.25%
8.29 6.25%
8.16 6.25%
8.14 18.75%
8.3.1 6.25%
7.4 6.25%
7.4 6.25%
4,75,00,01 6.25%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegCloseKey, RegQueryValueExA, RegOpenKeyExA, RegSetValueExA, RegCreateKeyExA, FreeSid, RegSetKeySecurity, StartServiceA, SetSecurityDescriptorOwner, ControlService, InitializeAcl, AddAccessAllowedAce, RegisterServiceCtrlHandlerA, StartServiceCtrlDispatcherA, SetServiceStatus, AllocateAndInitializeSid, ImpersonateNamedPipeClient, RevertToSelf, RegCreateKeyA, RegDeleteValueA, RegDeleteKeyA, OpenThreadToken, DuplicateToken, SetThreadToken, RegQueryInfoKeyA, RegEnumValueA, RegEnumKeyExA, QueryServiceConfigA, QueryServiceStatus, OpenSCManagerA, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, CloseServiceHandle, OpenServiceA, CreateServiceA, DeleteService, UnlockServiceDatabase, ChangeServiceConfigA, LockServiceDatabase
kernel32.dll
SetConsoleCtrlHandler, SetProcessShutdownParameters, GetCurrentProcessId, GetModuleHandleA, GetCurrentThreadId, GetComputerNameA, GetVersionExA, GetProcAddress, FreeLibrary, ReleaseMutex, CreateMutexA, LoadLibraryA, IsBadWritePtr, CreateEventA, IsBadReadPtr, WriteFile, SetFilePointer, CreateFileA, LocalFree, FormatMessageA, CreateThread, TerminateThread, SuspendThread, GetTickCount, ResetEvent, CopyFileA, MoveFileA, DeleteFileA, SetCommTimeouts, GetCommTimeouts, ClearCommError, ReadProcessMemory, OpenProcess, GetCurrentThread, GetSystemDirectoryA, GetWindowsDirectoryA, MoveFileExA, ReleaseSemaphore, WaitForSingleObject, DuplicateHandle, GetCurrentProcess, DeviceIoControl, DefineDosDeviceA, QueryDosDeviceA, ReadFile, CreateNamedPipeA, SetNamedPipeHandleState, RtlUnwind, ResumeThread, TlsSetValue, ExitThread, GetCommandLineA, GetVersion, ExitProcess, HeapFree, HeapAlloc, RaiseException, GetTimeZoneInformation, GetSystemTime, GetLocalTime, InterlockedDecrement, InterlockedIncrement, HeapReAlloc, TlsAlloc, TlsGetValue, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, DeleteCriticalSection, TerminateProcess, CloseHandle, FreeEnvironmentStringsA, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStrings, GetEnvironmentStringsW, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, GetEnvironmentVariableA, HeapDestroy, HeapCreate, VirtualFree, VirtualAlloc, HeapSize, SetUnhandledExceptionFilter, MultiByteToWideChar, LCMapStringA, LCMapStringW, IsBadCodePtr, GetCPInfo, GetACP, GetOEMCP, SetStdHandle, FlushFileBuffers, GetStringTypeA, GetStringTypeW, SetEndOfFile, CompareStringA, CompareStringW, SetEnvironmentVariableA, GetModuleFileNameA, Sleep, CreateProcessA, OpenEventA, SetEvent, OpenSemaphoreA, CreateSemaphoreA, GetLastError, GetExitCodeThread, SetLastError, UnhandledExceptionFilter
mpr.dll
WNetGetConnectionA
rpcrt4.dll
RpcServerRegisterIf, RpcServerListen, RpcServerUseProtseqA, NdrFullPointerXlatInit, NdrPointerUnmarshall, NdrFullPointerXlatFree, NdrConformantStringBufferSize, RpcEpRegisterA, RpcServerInqBindings, NdrConformantArrayMarshall, NdrSimpleStructMarshall, NdrComplexStructBufferSize, NdrComplexStructMarshall, NdrClientInitializeNew, I_RpcGetCurrentCallHandle, NdrGetBuffer, NdrSendReceive, NdrFreeBuffer, NdrServerInitializeNew, NdrConvert, RpcRaiseException, I_RpcGetBuffer, NdrConformantArrayUnmarshall, NdrAllocate, NdrSimpleStructUnmarshall, NdrConformantStringUnmarshall, NdrComplexStructUnmarshall, NdrPointerFree, RpcBindingVectorFree, RpcRevertToSelf, RpcImpersonateClient, NdrConformantArrayBufferSize, NdrConformantStringMarshall, RpcServerUnregisterIf, RpcEpUnregister, RpcMgmtWaitServerListen, RpcMgmtStopServerListening, NdrSimpleStructBufferSize
user32.dll
wsprintfA, PostMessageA, RegisterWindowMessageA, PostQuitMessage, DestroyWindow, DefWindowProcA, UnregisterClassA, DispatchMessageA, TranslateMessage, GetMessageA, IsWindow, CreateWindowExA, RegisterClassA, LoadCursorA, MessageBoxA
version.dll
GetFileVersionInfoSizeA, GetFileVersionInfoA, VerQueryValueA
winspool.drv
GetPrinterDataA, EnumPortsA, ClosePrinter, GetPrinterDriverA, OpenPrinterA, EnumPrintersA, DeleteMonitorA, AddPortA

LexBceS.exe

MarkVision for Windows (32 bit) by Lexmark International

Remove LexBceS.exe
Version:   8.16
MD5:   2b7005bd9e0966cccf70ae9a5b9d2427
SHA1:   c936e797a579a974e95a6bb08464555095a3483d
SHA256:   72e1b964f7a4c707e8c2bbdf01c035a2a3badbd724765de5e742c475c0659b36

Overview

LEXBCES.EXE runs as a service under the name LexBce Server (SYSTEM\CurrentControlSet\Services\LexBceS) with extensive SYSTEM privileges (full administrator access).

DetailsDetails

File name:LEXBCES.EXE
Publisher:Lexmark International, Inc.
Product name:MarkVision for Windows (32 bit)
Description:LexBce Service
Typical file path:C:\Windows\System32\lexbces.exe
File version:8.16
Size:296 KB (303,104 bytes)
Build date:2/24/2003 4:55 PM
Digital DNA
Entropy:6.227266
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'LexBceS' (LexBce Server)

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00004518%
0.028634%
Kernel CPU:0.00003699%
0.013761%
User CPU:0.00000819%
0.014873%
Kernel CPU time:140 ms/min
100,923,805ms/min
CPU cycles:1,220/sec
17,470,203/sec
Memory
Private memory:1.88 MB
21.59 MB
Private (maximum):4.65 MB
Private (minimum):36 KB
Non-paged memory:1.88 MB
21.59 MB
Virtual memory:77.17 MB
140.96 MB
Virtual memory (peak):78.17 MB
169.69 MB
Working set:248 KB
18.61 MB
Working set (peak):4.66 MB
37.95 MB
Page faults:1,866/min
2,039/min
I/O
I/O read transfer:0 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:0 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:105 Bytes/sec
448.09 KB/min
I/O other operations:1/sec
1,671/min
Resource allocations
Threads:9
12
Handles:161
600

BehaviorsProcess properties

Integrety level:System
Platform:32-bit
Command line:C:\Windows\System32\lexbces.exe
Owner:SYSTEM
Windows Service
Service name:SYSTEM\CurrentControlSet\Services\LexBceS
Display name:LexBce Server
Type:Win32OwnProcess, InteractiveProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
ADVAPI32.dll
Total CPU:0.00002473%
0.272967%
Kernel CPU:0.00001649%
0.107585%
User CPU:0.00000824%
0.165382%
CPU cycles:314/sec
5,741,424/sec
Memory:792 KB
1.16 MB
LEXBCES.EXE (main module)
Total CPU:0.00001649%
Kernel CPU:0.00001649%
User CPU:0.00000000%
CPU cycles:200/sec
Memory:308 KB
RPCRT4.dll
Total CPU:0.00001240%
Kernel CPU:0.00000826%
User CPU:0.00000414%
CPU cycles:158/sec
Memory:776 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 56.25%
Windows Vista Home Premium 12.50%
Windows 7 Home Premium 12.50%
Windows 7 Ultimate 6.25%
Windows XP Home Edition 6.25%
Microsoft Windows XP Home Edition 6.25%

Distribution by countryDistribution by country

United States installs about 64.29% of MarkVision for Windows (32 bit).

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 44.44%
ASUS 11.11%
Hewlett-Packard 11.11%
Sahara 11.11%
Lenovo 11.11%
Gateway 11.11%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE