Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

1.0.27.0 42.86%
1.0.26.0 14.29%
1.0.26.0 42.86%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
InitializeSecurityDescriptor, RegEnumValueA, RegCreateKeyExA, RegDeleteKeyA, RegSetValueExA, RegDeleteValueA, RegQueryValueExA, RegOpenKeyExA, RegEnumKeyExA, RegCloseKey, AllocateAndInitializeSid, SetKernelObjectSecurity, GetSecurityDescriptorDacl, SetSecurityInfo, InitializeAcl, AddAccessAllowedAce, ControlService, CloseServiceHandle, OpenServiceA, OpenSCManagerA, StartServiceA, SetSecurityDescriptorDacl, IsValidSid, GetLengthSid, GetAce, FreeSid
kernel32.dll
GetModuleFileNameA, GetLocalTime, CreateFileA, lstrcpynA, MultiByteToWideChar, lstrcatA, lstrcpyA, FormatMessageA, WideCharToMultiByte, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, DeleteFileA, GetWindowsDirectoryA, GetCurrentThreadId, WriteFile, SetFilePointer, GetFileSize, GetCurrentProcessId, SetLastError, GetCurrentProcess, GetVersionExA, GetExitCodeProcess, WaitForSingleObject, SetPriorityClass, CreateProcessA, SetThreadPriority, SetEvent, ResetEvent, CreateEventA, OpenEventA, ReleaseMutex, CreateMutexA, InterlockedIncrement, InterlockedDecrement, InterlockedExchange, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetComputerNameA, RtlUnwind, HeapFree, HeapAlloc, GetProcessHeap, GetStartupInfoA, ExitThread, CreateThread, LCMapStringA, LCMapStringW, GetCPInfo, ExitProcess, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, HeapSize, GetACP, GetOEMCP, GetStdHandle, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, SetHandleCount, GetFileType, HeapDestroy, HeapCreate, VirtualFree, QueryPerformanceCounter, GetSystemTimeAsFileTime, VirtualAlloc, HeapReAlloc, GetConsoleCP, GetConsoleMode, FlushFileBuffers, GetLocaleInfoA, GetStringTypeA, GetStringTypeW, GetUserDefaultLCID, EnumSystemLocalesA, IsValidLocale, IsValidCodePage, GetLocaleInfoW, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, SetStdHandle, ReadFile, CreateFileW, SetEndOfFile, GetCommandLineA, GetTickCount, Sleep, TerminateThread, CloseHandle, GetSystemDirectoryA, GetModuleHandleA, LoadLibraryA, GetProcAddress, GetLastError, RaiseException, FreeLibrary
user32.dll
SendMessageA, FindWindowA
winspool.drv
DeleteMonitorA

lxdicoms.exe

Printer Communication System by Lexmark International (Signed)

Remove lxdicoms.exe
Version:   1.0.26.0
MD5:   f5c6e7d6217a866858ccf717c947fdac
SHA1:   6b5d32114ecab5fbc3cff09fe657b6861e240e72
SHA256:   3a5038c04e9cb0431c5f1bc61def83935c44d238664e567768634bd21886dfe8

Overview

lxdicoms.exe runs as a service under the name lxdi_device with extensive SYSTEM privileges (full administrator access). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Lexmark International which was issued by the Thawte Consulting (Pty) Ltd. certificate authority (CA).

DetailsDetails

File name:lxdicoms.exe
Product name:Printer Communication System
Typical file path:C:\Windows\System32\lxdicoms.exe
Original name:GN__coms.exe
File version:1.0.26.0
Size:504.92 KB (517,040 bytes)
Certificate
Issued to:Lexmark International
Authority (CA):Thawte Consulting (Pty) Ltd.
Effective date:Thursday, August 4, 2005
Expiration date:Saturday, August 4, 2007
Digital DNA
File packed:No
Code language:Microsoft Visual C# / Basic .NET
.NET CLR:Yes
.NET NGENed:No
More details

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'lxdi_device'
Network connections
  • [UDP] listens on port 39025

  • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.00035385%
    0.028634%
    Kernel CPU:0.00018319%
    0.013761%
    User CPU:0.00017066%
    0.014873%
    Kernel CPU time:14,688 ms/min
    100,923,805ms/min
    Context switches:3/sec
    284/sec
    Memory
    Private memory:3.55 MB
    21.59 MB
    Private (maximum):7.28 MB
    Private (minimum):2.17 MB
    Non-paged memory:3.55 MB
    21.59 MB
    Virtual memory:39.14 MB
    140.96 MB
    Virtual memory (peak):44.14 MB
    169.69 MB
    Working set:4.83 MB
    18.61 MB
    Working set (peak):7.28 MB
    37.95 MB
    Page faults:20,100/min
    2,039/min
    I/O
    I/O read transfer:0 Bytes/sec
    1.02 MB/min
    I/O read operations:1/sec
    343/min
    I/O write transfer:0 Bytes/sec
    274.99 KB/min
    I/O write operations:1/sec
    227/min
    I/O other transfer:871 Bytes/sec
    448.09 KB/min
    I/O other operations:95/sec
    1,671/min
    Resource allocations
    Threads:9
    12
    Handles:419
    600
    GUI GDI count:4
    103
    GUI USER count:1
    49

    BehaviorsProcess properties

    Integrety level:Undefined
    Platform:32-bit
    Command line:C:\Windows\System32\lxdicoms.exe -service
    Owner:SYSTEM
    Windows Service
    Service name:lxdi_device
    Type:Win32OwnProcess, InteractiveProcess
    Parent process:services.exe (Services and Controller app by Microsoft)

    ResourcesThreads

    Averages
     
    lxdiserv.dll (Printer Communication System)
    Total CPU:0.01368640%
    0.272967%
    Kernel CPU:0.00737665%
    0.107585%
    User CPU:0.00630975%
    0.165382%
    Context switches:1/sec
    79/sec
    Memory:1.14 MB
    1.16 MB
    lxdicoms.exe (main module)
    Total CPU:0.00004443%
    Kernel CPU:0.00003610%
    User CPU:0.00000833%
    Memory:528 KB

    Common loaded modules

    These are modules that are typiclaly loaded within the context of this process.

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Home Premium 71.43%
    Windows 8 14.29%
    Microsoft Windows XP 14.29%

    Distribution by countryDistribution by country

    United States installs about 83.33% of Printer Communication System.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Dell 100.00%
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE