home

nada_264_setpoint_logitech_64.exe

WEB_64 Setup

Logitech

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from dl2.pcdcdn.com and multiple other hosts.
Publisher:
Logitech Inc.  (signed by Logitech)

Product:
WEB_64 Setup

Description:
Setup

Version:
6.61.15

MD5:
5375d31264eae3db960b7b8a116e8f31

SHA-1:
2cc35da954c3899f46de2eac52159c36959803ed

SHA-256:
7eaf72d37460f5f8a6c4cb3ecbd27aad317ae7f678e0e127c3dc955ef0b202da

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 4:22:22 AM UTC  (today)

File size:
78.1 MB (81,855,696 bytes)

Copyright:
Copyright � 2005-2013 Logitech. All Rights Reserved

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\nada_264_setpoint_logitech_64.exe

Digital Signature
Signed by:
Logitech

Authority:
VeriSign, Inc.

Valid from:
3/18/2013 7:00:00 PM

Valid to:
5/18/2015 6:59:59 PM

Subject:
CN=Logitech, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Logitech, L=Newark, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
60698458B2A66CAE5253F8E7AEED3AC6

File PE Metadata
Compilation timestamp:
9/9/2009 8:23:14 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1572864:TvKQZLZCWyKv1co2a6BKGszGzAQy+XlPM7dyoXM2q81vpOfI1H9ScMlBVD:THZLZHy6c3BKHS06XFM7dy2l4BVD

Entry address:
0x33E9

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 70, 85, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 80, 40, 00, 55, FF, 15, B0, 82, 40, 00, 6A, 08, A3, 78, 06, 47, 00, E8, 67, 27, 00, 00, 55, 68, B4, 02, 00, 00, A3, 90, 05, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 6C, 85, 40, 00, FF, 15, 80, 81, 40, 00, 68, 54, 85, 40, 00, 68, 80, 85, 46, 00, E8, 35, 26, 00, 00, FF, 15, B0, 80, 40, 00, 50, BF, A0, 10, 4C, 00, 57, E8, 23, 26, 00, 00...
 
[+]

Entropy:
7.9999

Packer / compiler:
Nullsoft install system v2.x

Code size:
25 KB (25,600 bytes)

The file nada_264_setpoint_logitech_64.exe has been seen being distributed by the following 27 URLs.

http://dl2.pcdcdn.com/files/qHJO3Q5TMQK4KgLuq8FT0Q==,1476705814/2/.../0/6/6/.../setpoint6.61.15_64.exe

https://d2.driverscollection.com/4513757649843/8f6d16dc51ffe4f15a2b10fa591475a7e6955cef82cddd53884b834662abb33353f8212d2a48907ef4dbd985587af35757f92d76/3/98/9/.../setpoint6.61.15_64.exe

https://d2.driverscollection.com/6e9cd3807cad/e329e4366a840db961a0abf66d523219f6649d1a07659a6a5b4985a56ce219891ac981663af15c27991a7c789aa738f6581dae69/3/98/9/.../setpoint6.61.15_64.exe

http://www.oldapps.com/setpoint.php?app=5375D31264EAE3DB960B7B8A116E8F31

http://driveragent.com/.../agreement?a=53460d1c&m=8&track=6_-609340384_3ac7e589ae2a983bc9800119c5a23c4c

https://d2.driverscollection.com/_7_14192142192242292342a0280713182510088a0767cb2c2ab89/989bec3c96f794f109e5b7b50668505762179f52c811a169adba9880b1a042db5337adc155c3389f7aa3aaeadb171c5557b469fa/3/98/9/.../setpoint6.61.15_64.exe

https://d2.driver.ru/2ecbf4f599a7de/a6e47cc4714ae0cb9d46dd750cbdba8a5e871b414d23e7a98985e105df9d39a85967adfd53e189ed5ad4d598b07d02c2578a73be/3/98/9/.../setpoint6.61.15_64.exe

https://d2.driverscollection.com/4ad119ef67607/5873261c56293149f5e58e106e41b1cfd464164cc2f10bf6d2f1ee826cb483b0bd6fa3b9af7390391d17381fe0a5905f54f8ac23/3/98/21/.../setpoint6.61.15_64.exe

http://www.driverbulks.com/.../setpoint6.61.15_64.exe

https://d2.driverscollection.com/4513760ff1769/f5b5e0178b59f320335a45e23d50d02faa6eaaf3e36d1e16109ab9b1d15cf9a3fe2d5d9df81ce1120ffc007891b43beb56c42928/3/98/9/.../setpoint6.61.15_64.exe

https://d2.driverscollection.com/2b355fdbb3e222/fa939ff1e644c6b9045186c3da35d67b6566856e93275b0d7ea941d44d26ea3552cc1372808c37eefbdb1347f278f17c550b50de/3/98/9/.../setpoint6.61.15_64.exe

ftp://ftp.logitech.com/pub/techsupport/.../setpoint6.61.15_64.exe

http://driveragent.com/.../agreement?a=53460d1c&m=8&track=6_-669073885_8a275691c4caf443cdbb22e6a0b221c4

http://www.filehorse.com/download/file/.../

http://files01.techspot.com/.../setpoint6.61.15_64.exe

http://soft.archive1.clubic.com/files/033194084ad26a2c9d8e288b7fb94720/52e2923e/.../logitech-setpoint_6-61-15_fr_404736_64.exe

http://dl.filehorse.com/win/drivers/.../SetPoint-6.61-(64-bit).exe

http://dl.cdn.chip.de/downloads/.../setpoint6.61.150_64.exe

http://www.logitech.com/pub/techsupport/.../setpoint6.61.15_smart.exe

http://download01.logitech.com/web/ftp/pub/techsupport/.../setpoint6.61.15_smart.exe

http://logitech-viva.navisite.net/web/ftp/pub/techsupport/.../setpoint6.61.15_smart.exe

http://www.driversbulk.com/.../setpoint6.61.15_64.exe

http://logitech-sjca.navisite.net/web/ftp/pub/techsupport/.../setpoint6.61.15_64.exe

http://www.logitech.com/pub/techsupport/.../setpoint6.61.15_64.exe

http://download01.logitech.com/web/ftp/pub/techsupport/.../setpoint6.61.15_64.exe

http://logitech-louk.navisite.net/web/ftp/pub/techsupport/.../setpoint6.61.15_64.exe

http://logitech-viva.navisite.net/web/ftp/pub/techsupport/.../setpoint6.61.15_64.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.