home

xmarkssync.exe

Xmarks for IE

LastPass

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Xmarks’. This is installed with multiple programs including Xmarks for IE.
Publisher:
Xmarks.com  (signed by LastPass)

Product:
Xmarks for IE

Version:
1.0.0.1

MD5:
087c0421729f3260ed822805d8d2074e

SHA-1:
3ee83e4031a7fcda5ddee8c3c968682d6fc70b14

SHA-256:
ce3ad6d94477b953aa5545a7a1292070accb4bc316067f3c07bfd4de37d2423d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 1:02:46 AM UTC  (today)

File size:
1.1 MB (1,125,376 bytes)

Product version:
1.0.0.1

Copyright:
(c) Xmarks.com. All rights reserved.

Original file name:
xmarkssync.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\xmarks\ie extension\xmarkssync.exe

Digital Signature
Signed by:
LastPass

Authority:
COMODO CA Limited

Valid from:
10/13/2011 5:00:00 PM

Valid to:
10/13/2014 4:59:59 PM

Subject:
CN=LastPass, O=LastPass, STREET=226 Maple Ave W STE 301, L=Vienna, S=VA, PostalCode=22180, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00993DB38720B4B3EC5280105E019B511D

File PE Metadata
Compilation timestamp:
6/6/2013 12:38:08 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:OGLAdJbEZ6i/Jz9Y/8z0r//vmEo5Qi57WQVOBQgWARPBW12cDihdBJ+dd61DXRwa:OTdCZBz9x0TXmk571vRJmFFZTts

Entry address:
0x735BB

Entry point:
E8, 0B, D8, 00, 00, E9, 79, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 4C, 24, 04, F7, C1, 03, 00, 00, 00, 74, 24, 8A, 01, 83, C1, 01, 84, C0, 74, 4E, F7, C1, 03, 00, 00, 00, 75, EF, 05, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8B, 01, BA, FF, FE, FE, 7E, 03, D0, 83, F0, FF, 33, C2, 83, C1, 04, A9, 00, 01, 01, 81, 74, E8, 8B, 41, FC, 84, C0, 74, 32, 84, E4, 74, 24, A9, 00, 00, FF, 00, 74, 13, A9, 00, 00, 00, FF, 74, 02, EB, CD, 8D, 41, FF, 8B, 4C, 24, 04, 2B...
 
[+]

Entropy:
6.3145

Code size:
842.5 KB (862,720 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Xmarks

Command:
C:\Program Files\xmarks\ie extension\xmarkssync.exe -q


The file xmarkssync.exe has been discovered within the following programs.

LogMeIn  by LogMeIn, Inc.
LogMeIn remote access products use a proprietary remote desktop protocol that is transmitted via SSL. An SSL certificate is created for each remote desktop and is used to cryptographically secure communications between the remote desktop and the accessing computer.
www.logmein.com
1% remove it
MX-810 ProWizard  by Universal Remote Control, Inc
About 4% of users remove it
Secure My Files  by SecuSimple
secusimple.com/securemyfiles.html
About 1% of users remove it
Xmarks for IE  by Xmarks
Publisher's description - “Xmarks is a free add-on for your browser that synchronizes and backs up your favorites across multiple computers and more. Xmarks helps you find the best sites on the web based on what millions of people are bookmarking.”
download.xmarks.com/download/ie
9% remove it
 
Powered by Should I Remove It?

Scan xmarkssync.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.