Versions

1.91.0.0	62.50%
1.91.0.0	37.50%

There are 2 versions of lxeaserv.exe in the wild, the latest version being 1.91.0.0. It is started as a Windows Service with the name 'lxeaCATSCustConnectService'. In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 116.66 KB. The file is a digitally signed and issued to Lexmark International by Thawte Consulting (Pty) Ltd.. The executable is a .NET framework assembly utilizing the CLR. During the process's lifecycle, the typical CPU resource utilization is about 0.0003% including both foreground and background operations, the average private memory consumption is about 941 KB with the maximum memory reaching around 2.83 MB. Addionally, typically read and write I/O disk operations is about 3 Bytes per minute for reads and 0 Bytes per minute for writes.