lxcrcoms.exe
Printer Communication System by Lexmark International (Signed)
Overview
There are 2 versions of lxcrcoms.exe in the wild, the latest version being 99.99.99.99. It is started as a Windows Service with the name 'lxcr_device'. In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 538.92 KB. The file is a digitally signed and issued to Lexmark International by Thawte Consulting (Pty) Ltd.. During the process's lifecycle, the typical CPU resource utilization is about 0.0002% including both foreground and background operations, the average private memory consumption is about 3.21 MB with the maximum memory reaching around 5.46 MB. Addionally, typically read and write I/O disk operations is about 41 Bytes per minute for reads and 0 Bytes per minute for writes.
Details |
File name: | lxcrcoms.exe |
Product name: | Printer Communication System |
Typical file path: | C:\Windows\System32\lxcrcoms.exe |
Original name: | GN__coms.exe |
Certificate |
Issued to: | Lexmark International |
Authority (CA): | Thawte Consulting (Pty) Ltd. |
Effective date: | Thursday, August 4, 2005 |
Expiration date: | Saturday, August 4, 2007 |
Windows Service |
Service name: | lxcr_device |
Type: | Win32OwnProcess, InteractiveProcess |
Behaviors
(Note, the behaviors below are for all versions of lxcrcoms.exe, select a unique version for details.)
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
All file variations of lxcrcoms.exe