home

xmarkssync.exe

Xmarks for IE

LastPass

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Xmarks’. This is installed with Xmarks for IE.
Publisher:
Xmarks.com  (signed by LastPass)

Product:
Xmarks for IE

Version:
1.0.0.1

MD5:
c196a18249ae8cdac4f6b28ff938599a

SHA-1:
8283d798f33988e501f8304f46af96762f29b2b9

SHA-256:
de4eef02a5b4c6304cee772ff6c1bc69654a7a134a03605913a244313698b32c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 12:59:22 AM UTC  (today)

File size:
1.1 MB (1,184,256 bytes)

Product version:
1.0.0.1

Copyright:
(c) Xmarks.com. All rights reserved.

Original file name:
xmarkssync.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\xmarks\ie extension\xmarkssync.exe

Digital Signature
Signed by:
LastPass

Authority:
COMODO CA Limited

Valid from:
10/13/2011 7:00:00 PM

Valid to:
10/13/2014 6:59:59 PM

Subject:
CN=LastPass, O=LastPass, STREET=226 Maple Ave W STE 301, L=Vienna, S=VA, PostalCode=22180, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00993DB38720B4B3EC5280105E019B511D

File PE Metadata
Compilation timestamp:
8/20/2014 2:26:06 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:vxoNDCh260Y12YRMrPaS9aSSZRPRTZ+lO:vxoNDAv0m2Lry3XjPlZ+lO

Entry address:
0x7BE8B

Entry point:
E8, 1B, DD, 00, 00, E9, 79, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 4C, 24, 04, F7, C1, 03, 00, 00, 00, 74, 24, 8A, 01, 83, C1, 01, 84, C0, 74, 4E, F7, C1, 03, 00, 00, 00, 75, EF, 05, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8B, 01, BA, FF, FE, FE, 7E, 03, D0, 83, F0, FF, 33, C2, 83, C1, 04, A9, 00, 01, 01, 81, 74, E8, 8B, 41, FC, 84, C0, 74, 32, 84, E4, 74, 24, A9, 00, 00, FF, 00, 74, 13, A9, 00, 00, 00, FF, 74, 02, EB, CD, 8D, 41, FF, 8B, 4C, 24, 04, 2B...
 
[+]

Entropy:
6.3274

Code size:
894 KB (915,456 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Xmarks

Command:
C:\Program Files\xmarks\ie extension\xmarkssync.exe -q


The file xmarkssync.exe has been discovered within the following program.

Xmarks for IE  by Xmarks
Publisher's description - “Xmarks is a free add-on for your browser that synchronizes and backs up your favorites across multiple computers and more. Xmarks helps you find the best sites on the web based on what millions of people are bookmarking.”
download.xmarks.com/download/ie
9% remove it
 
Powered by Should I Remove It?

Scan xmarkssync.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.