home

fxdoccreatorclient.exe

gDocCreator

Global Graphics Software Limited

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘FxDocCreatorClient’.
Publisher:
Global Graphics Software Ltd.  (signed by Global Graphics Software Limited)

Product:
gDocCreator

Description:
gDocCreator Client application

Version:
2.0.0.1

MD5:
55661108be2af8c210e65d54857f6c2e

SHA-1:
f08a2301764f656d610fd87d4c1d4829f01b1c3b

SHA-256:
4fef9a4b8b1b8d08748583f5f5326d3e6b932561b182d72d7ea0b1313cd82c90

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 1:39:35 PM UTC  (today)

File size:
589.4 KB (603,544 bytes)

Product version:
2.0.0.1

Copyright:
Copyright (C) 2009 Global Graphics Software Ltd. . All rights reserved.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\xerox\docuworks\bin\fxdoccreatorclient.exe

Digital Signature
Signed by:
Global Graphics Software Limited

Authority:
VeriSign, Inc.

Valid from:
6/8/2010 8:00:00 PM

Valid to:
6/9/2013 7:59:59 PM

Subject:
CN=Global Graphics Software Limited, OU=Digital ID Class 3 - Microsoft VBA Software Validation v2, O=Global Graphics Software Limited, L=Cambridge, S=Cambridgeshire, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
26E9F49EB7E47E0B3CA6EADC66E547B9

File PE Metadata
Compilation timestamp:
1/21/2011 11:45:08 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:ulLX+Xpbkbda77jyMDMH1OqZc86Tv3G8GG+RrGFXJ6F0yc3utgIYgbHkd:ulLOpkbPlHS73G8GG+iutgIYgbHkd

Entry address:
0x268F2

Entry point:
E8, 8D, 04, 00, 00, E9, 39, FD, FF, FF, FF, 25, 00, 35, 43, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, FF, 25, 08, 35, 43, 00, FF, 25, 0C, 35, 43, 00, CC, CC, CC, CC, 83, 3D, 04, 67, 44, 00, 00, 74, 2D, 55, 8B, EC, 83, EC, 08, 83, E4, F8, DD, 1C, 24, F2, 0F, 2C, 04, 24, C9, C3, 83, 3D, 04, 67, 44, 00, 00, 74, 11, 83, EC, 04, D9, 3C, 24, 58, 66, 83, E0, 7F, 66, 83, F8, 7F, 74, D3, 55, 8B, EC, 83, EC, 20, 83, E4, F0, D9, C0, D9, 54, 24, 18, DF, 7C, 24, 10, DF, 6C, 24, 10, 8B, 54, 24, 18, 8B...
 
[+]

Entropy:
6.4290

Code size:
200 KB (204,800 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
FxDocCreatorClient

Command:
"C:\Program Files\xerox\docuworks\bin\fxdoccreatorclient.exe"


Scan fxdoccreatorclient.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.