» ksp_12.01.002.exe
Overview
Analysis
File Details
Downloads (1)

ksp_12.01.002.exe

KSP

LOGOTECH AA s.c.

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.logotech.com.pl.

File name:

ksp_12.01.002.exe

Publisher:

Logotech AA (signed by LOGOTECH AA s.c.)

Product:

KSP

Description:

(2012) 12.01.002

Version:

011

MD5:

25c0fe31c46ebab621d55c5a12a53e1c

SHA-1:

ca3164b34ac6880dbf5f77ccb4f2f3fba44f1408

SHA-256:

2123c1a22d7804cd4e96710a1fc8c253d2afb42d4418c6b808542d2a975f0fb8

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/5/2024 1:36:19 PM UTC (today)

File size:

9.7 MB (10,134,168 bytes)

Product version:

12.01.002

Logotech AA

File type:

Executable application (Win32 EXE)

Installer:

Inno Setup

Digital Signature

Signed by:

LOGOTECH AA s.c.

Authority:

Unizeto Technologies S.A.

Valid from:

9/19/2011 11:56:53 AM

Valid to:

9/18/2012 11:56:53 AM

Subject:

C=PL, O=LOGOTECH AA s.c., CN=Logotech AA, E=ksp@logotech.com.pl

Issuer:

CN=Certum Level III CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL

Serial number:

0590F942D84CC8D4F7129528C9347000

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

196608:w0ZvvX2o1Jn2Zch0ut6ZTsy7J93TngRG2TIGYYAaGePRt/xQbO3UyBxjw98:w0Z311JeTBTn4I+fRlxbbfjk8

Entry address:

0x9B60

Entry point:

55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 66, 95, FF, FF, E8, 6D, A7, FF, FF, E8, 98, C9, FF, FF, E8, DF, C9, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, 17, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, E0, A1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, C8, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 17, 96, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD, 40, 00, B2, 01, B8... 
[+]

Packer / compiler:

Inno Setup v5.x - Installer Maker

Code size:

37 KB (37,888 bytes)

The file ksp_12.01.002.exe has been seen being distributed by the following URL.

http://www.logotech.com.pl/sites/default/.../Ksp_12.01.002.exe

Scan ksp_12.01.002.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.