nada_232_setpoint_logitech_32.exe

WEB_32 Setup

Logitech

This is a setup and installation application. The file has been seen being downloaded from d2.driverscollection.com and multiple other hosts.
Publisher:
Logitech Inc.  (signed by Logitech)

Product:
WEB_32 Setup

Description:
Setup

Version:
6.61.15

MD5:
c5e402ced9d7bf44c8bfc52174ec2bf7

SHA-1:
975eb0d11c09904a95dd2dd1df689f779c8e8764

SHA-256:
5d339dea9802595836c7810192f3fc828e19a4ed45c85f62f40df99afe8b0224

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/26/2024 2:30:01 AM UTC  (today)

Scan engine
Detection
Engine version

Fortinet FortiGate
W32/Urelas.O!tr
1/15/2014

File size:
76 MB (79,732,624 bytes)

Copyright:
Copyright � 2005-2013 Logitech. All Rights Reserved

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\nada_232_setpoint_logitech_32.exe

Digital Signature
Signed by:

Subject:
CN=Logitech, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Logitech, L=Newark, S=California, C=US

Serial number:
60698458B2A66CAE5253F8E7AEED3AC6

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
1572864:sVtO43LQ6Dtwo2a6BKGszGzAQy+XlPM7dyoXM2q81vpOfI1HoHUQPCBR7H:sR3LQ663BKHS06XFM7dy2l80WCBxH

The file nada_232_setpoint_logitech_32.exe has been seen being distributed by the following 20 URLs.

https://d2.driverscollection.com/1d39c9ed3352367/10f454ed3e6dbdbded8e07d5521ea19dd0f8a9db9841d0ed3ede7879319fc9e7c59f72d93703f539670828975b1d6380583a0aeb/3/98/9/.../setpoint6.61.15_32.exe

http://dl2.pcdcdn.com/files/jUJ8ryBbQgj7LIuOSeUtqw==,1476706069/2/9/0/6/6/.../setpoint6.61.15_32.exe

https://d2.driverscollection.com/4513757649843/96e7adc939aa3328702979c11c19f5793b96b1ce0fd9acdba653b83f33e9659053f8212d2a48907ef4dbd985587af35757f9292c/3/98/9/.../setpoint6.61.15_32.exe

http://www.driverbulks.com/.../setpoint6.61.15_32.exe