dleacoms.exe
Printer Communication System by Lexmark International (Signed)
Overview
There are 3 versions of dleacoms.exe in the wild, the latest version being 9.2.33.0. It is started as a Windows Service with the name 'dlea_device'. In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 880 KB. The file is a digitally signed and issued to Lexmark International by Thawte Consulting (Pty) Ltd.. The executable is a .NET framework assembly utilizing the CLR. During the process's lifecycle, the typical CPU resource utilization is about 0.0006% including both foreground and background operations, the average private memory consumption is about 4.06 MB with the maximum memory reaching around 6.95 MB. Addionally, typically read and write I/O disk operations is about 52 Bytes per minute for reads and 37 Bytes per minute for writes.
 Details
|
| File name: | dleacoms.exe |
| Product name: | Printer Communication System |
| Typical file path: | C:\Windows\System32\dleacoms.exe |
| Original name: | GN__coms.exe |
| Certificate |
| Issued to: | Lexmark International |
| Authority (CA): | Thawte Consulting (Pty) Ltd. |
| Effective date: | Monday, June 22, 2009 |
| Expiration date: | Wednesday, August 3, 2011 |
| Windows Service |
| Service name: | dlea_device |
| Type: | Win32OwnProcess, InteractiveProcess |
Behaviors
(Note, the behaviors below are for all versions of dleacoms.exe, select a unique version for details.)
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
All file variations of dleacoms.exe
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
83.33% |
|
| Windows 7 Ultimate |
16.67% |
|
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
83.33% |
|
| MSI |
16.67% |
|
