fxksmRun.exe

SimpleMonitor-AP

Fuji Xerox Co., Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘M255 RUN’. This is installed with DocuPrint CM215 f_fw.
Scan fxksmRun.exe - Powered by Reason Core Security
Publisher:
Fuji Xerox Co., Ltd.

Product:
SimpleMonitor-AP

Description:
Auto Run Module

Version:
2.124

MD5:
82349f10fb6a3b8356b39f0cd90f1556

SHA-1:
9f743d2396584360aaed4a7fcc76bc77c91c3239

SHA-256:
27cc9ebe233aebdd1ea7183c5d0cb2fcf1358afabf290291b9e14d058bcd6247

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/8/2016 3:08:03 PM UTC  (today)

File size:
349 KB (357,376 bytes)

Product version:
2.124

Copyright:
(C) Fuji Xerox Co., Ltd. 2013

Original file name:
fxksmRun.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\fuji xerox\docuprint ssw2\simplemonitor for ap\fxksmrun.exe

File PE Metadata
Compilation timestamp:
5/22/2013 9:57:02 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3072:KRJ8hDgiCN8Qf8s5CYoh7WGju+6FyjCKivYYYYYYYYYYYYYYYYYYYYYYYYYYYYYZ:Kchkiw8Qcfju+6FyjCT

Entry address:
0x134C

Entry point:
48, 83, EC, 28, E8, B3, 19, 00, 00, 48, 83, C4, 28, E9, 12, FE, FF, FF, CC, CC, 48, 85, C9, 74, 37, 53, 48, 83, EC, 20, 4C, 8B, C1, 48, 8B, 0D, 9C, B8, 00, 00, 33, D2, FF, 15, AC, 5C, 00, 00, 85, C0, 75, 17, E8, 7F, 1A, 00, 00, 48, 8B, D8, FF, 15, 92, 5C, 00, 00, 8B, C8, E8, 27, 1A, 00, 00, 89, 03, 48, 83, C4, 20, 5B, C3, CC, CC, CC, 48, 89, 4C, 24, 08, 48, 81, EC, 88, 00, 00, 00, 48, 8D, 0D, ED, AE, 00, 00, FF, 15, AF, 5C, 00, 00, 4C, 8B, 1D, D8, AF, 00, 00, 4C, 89, 5C, 24, 58, 45, 33, C0, 48, 8D, 54, 24...
 
[+]

Entropy:
5.1573

Code size:
22.5 KB (23,040 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
M255 RUN

Command:
"C:\Program Files\fuji xerox\docuprint ssw2\simplemonitor for ap\fxksmrun.exe"


The file fxksmRun.exe has been discovered within the following program.

DocuPrint CM215 f_fw  by Fuji Xerox
About 6% of users remove it
 
Powered by Should I Remove It?

Scan fxksmRun.exe - Powered by Reason Core Security