home

LWS.exe

Logitech Webcam Software

Logitech Inc

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘LogitechQuickCamRibbon’.
Publisher:
Logitech Inc.  (signed by Logitech Inc)

Product:
Logitech Webcam Software

Description:
Camera Software

Version:
12.10.1113.0

MD5:
db4e60ce5970cd9a640126be4d7c32ef

SHA-1:
4200874cc45c935ac3860a45654cfa935e75cc19

SHA-256:
a5d9281f2c756c4722066c418bb7be6d6bd108ae99c0bc39bead970f49abc490

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/2/2024 5:20:07 PM UTC  (today)

File size:
2.7 MB (2,793,304 bytes)

Product version:
12.10.1113.0

Copyright:
(c) 1996-2009 Logitech. All rights reserved.

Original file name:
LWS.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\logitech\logitech webcam software\lws.exe

Digital Signature
Signed by:
Logitech Inc

Authority:
VeriSign, Inc.

Valid from:
10/6/2009 2:00:00 AM

Valid to:
10/20/2011 1:59:59 AM

Subject:
CN=Logitech Inc, OU=Corp Signing Cert, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Logitech Inc, L=Fremont, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
4A1BCAE82193CB3FFE2AF2A5541B9C07

File PE Metadata
Compilation timestamp:
10/14/2009 10:32:38 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

Entry address:
0xC4867

Entry point:
E8, FF, 91, 00, 00, E9, 17, FE, FF, FF, 51, C7, 01, CC, F5, 50, 00, E8, 82, 92, 00, 00, 59, C3, 56, 8B, F1, E8, EA, FF, FF, FF, F6, 44, 24, 08, 01, 74, 07, 56, E8, 69, 0A, FE, FF, 59, 8B, C6, 5E, C2, 04, 00, 8B, 44, 24, 04, 83, C1, 09, 51, 83, C0, 09, 50, E8, C4, 92, 00, 00, F7, D8, 59, 1B, C0, 59, 40, C2, 04, 00, 3B, 0D, 00, 27, 55, 00, 75, 02, F3, C3, E9, 33, 93, 00, 00, 55, 8B, EC, 56, 8B, 75, 14, 57, 33, FF, 3B, F7, 75, 04, 33, C0, EB, 65, 39, 7D, 08, 75, 1B, E8, 4C, 2C, 00, 00, 6A, 16, 5E, 89, 30, 57...
 
[+]

Entropy:
7.2683

Code size:
1 MB (1,083,392 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
LogitechQuickCamRibbon

Command:
"C:\Program Files\logitech\logitech webcam software\lws.exe" \hide


Scan LWS.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.