home

fxdoccreatorclient.exe

DocuWorks PDF Creator

Global Graphics Software Limited

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘FxDocCreatorClient’.
Publisher:
Fuji Xerox Co, Ltd.  (signed by Global Graphics Software Limited)

Product:
DocuWorks PDF Creator

Description:
Docuworks PDF Creator Client application

Version:
2.6.5.0

MD5:
9ba2e6133cf271fad3a1ebfe52b2ceeb

SHA-1:
df4474f0e8d08c77d0e367674cc8e3e1115e3a4d

SHA-256:
b79502f6ea53908ec945ae5f3c28ad9f6987d213a6108bfa252c128f801ece9a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 5:49:24 AM UTC  (today)

File size:
642.4 KB (657,808 bytes)

Product version:
v2.6.5

Copyright:
Copyright © 2011 Global Graphics Software Ltd.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\fuji xerox\docuworks\bin\fxdoccreatorclient.exe

Digital Signature
Signed by:
Global Graphics Software Limited

Authority:
VeriSign, Inc.

Valid from:
5/7/2013 8:00:00 AM

Valid to:
7/6/2016 7:59:59 AM

Subject:
CN=Global Graphics Software Limited, OU=gDoc, OU=Digital ID Class 3 - Microsoft VBA Software Validation v2, O=Global Graphics Software Limited, L=Cambridge, S=Cambridgeshire, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3D64BC890B1B676F52E36FBB303D3F8F

File PE Metadata
Compilation timestamp:
10/26/2013 9:27:14 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:/BnAI/7YoEi5TeK9E/PHEEOjGv86Tv3G8GG+RrGFXJ6F0yc3utgIYgJScqp6Oz2a:JnAU7Y9iQK9Ah73G8GG+iutgIYg0aHg

Entry address:
0x29AA2

Entry point:
E8, 8D, 04, 00, 00, E9, 39, FD, FF, FF, FF, 25, F4, E5, 42, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, FF, 25, EC, E5, 42, 00, FF, 25, E8, E5, 42, 00, CC, CC, CC, CC, 83, 3D, F4, BA, 43, 00, 00, 74, 2D, 55, 8B, EC, 83, EC, 08, 83, E4, F8, DD, 1C, 24, F2, 0F, 2C, 04, 24, C9, C3, 83, 3D, F4, BA, 43, 00, 00, 74, 11, 83, EC, 04, D9, 3C, 24, 58, 66, 83, E0, 7F, 66, 83, F8, 7F, 74, D3, 55, 8B, EC, 83, EC, 20, 83, E4, F0, D9, C0, D9, 54, 24, 18, DF, 7C, 24, 10, DF, 6C, 24, 10, 8B, 54, 24, 18, 8B...
 
[+]

Entropy:
6.4107

Code size:
180 KB (184,320 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
FxDocCreatorClient

Command:
"C:\Program Files\fuji xerox\docuworks\bin\fxdoccreatorclient.exe"


Scan fxdoccreatorclient.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.