home

lxcgmon.exe

Lexmark Device Monitor

Lexmark International, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘lxcgmon.exe’.
Publisher:
Lexmark International, Inc.  (signed and verified)

Product:
Lexmark Device Monitor

Version:
3.98.0.0

MD5:
5b7408f33c1162b8c5514cd486e01a7b

SHA-1:
b7d12917fbdfc39d17d12adbddf3c70b07f4d042

SHA-256:
8517bcb3930de146589c4d7c21b76b868edcc628398b6436dee2a0d59f677615

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 12:18:24 AM UTC  (today)

File size:
200.9 KB (205,744 bytes)

Product version:
3.98.0.0

Original file name:
lxcgmon.exe

File type:
Executable application (Win32 EXE)

Language:
Swedish (Sweden)

Common path:
C:\Program Files\lexmark 2300 series\lxcgmon.exe

Digital Signature
Signed by:
Lexmark International, Inc.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
8/4/2005 9:28:51 PM

Valid to:
8/4/2007 9:28:51 PM

Subject:
CN="Lexmark International, Inc.", OU=PS&SD Business Software & Solutions, O="Lexmark International, Inc.", L=Lexington, S=Kentucky, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
3FB8F5

File PE Metadata
Compilation timestamp:
1/17/2007 10:35:22 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:1TXnNXqsgPhVg+bmJe3p79PnCnRMdXaPYk:1XnNXqsgPhVg+bmJe3p79CRMIPf

Entry address:
0x1C56

Entry point:
55, 8B, EC, 6A, FF, 68, 98, 25, 42, 00, 68, F4, 1D, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, CC, 22, 42, 00, 59, 83, 0D, F8, C2, 42, 00, FF, 83, 0D, FC, C2, 42, 00, FF, FF, 15, D0, 22, 42, 00, 8B, 0D, 2C, C1, 42, 00, 89, 08, FF, 15, D4, 22, 42, 00, 8B, 0D, 28, C1, 42, 00, 89, 08, A1, D8, 22, 42, 00, 8B, 00, A3, F4, C2, 42, 00, E8, 2E, 01, 00, 00, 39, 1D, 50, 84, 42, 00, 75, 0C, 68, F0, 1D, 40, 00, FF, 15, DC, 22...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
132 KB (135,168 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
lxcgmon.exe

Command:
"C:\Program Files\lexmark 2300 series\lxcgmon.exe"


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.