» LWEMon.exe
Overview
Analysis
File Details
Behaviors (1)

LWEMon.exe

Logitech Gaming Software

Logitech

It runs as a scheduled task under the Windows Task Scheduler.

File name:

LWEMon.exe

Publisher:

Logitech Inc. (signed by Logitech)

Product:

Logitech Gaming Software

Description:

Logitech WingMan Event Monitor

Version:

5.10.127

MD5:

5ee82e78067e00f6e23c53ce1fc08dd2

SHA-1:

19b16615c43e1d0c28f7fb5f98520dbff78294e0

SHA-256:

6d856f05b1bcf933576b3e0821e26dfab2e789391a92e6c61f3f6c2bd1d1d05f

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 3:59:27 PM UTC (today)

File size:

302.9 KB (310,199 bytes)

Product version:

5.10.127

Trademarks:

Logitech, the Logitech logo, and other Logitech marks are owned by Logitech and may be registered. All other trademarks are the property of their res

Original file name:

LWEMon.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\logitech\gaming software\lwemon.exe

Digital Signature

Signed by:

Logitech

Authority:

VeriSign, Inc.

Valid from:

12/1/2009 3:00:00 AM

Valid to:

1/18/2012 2:59:59 AM

Subject:

CN=Logitech, OU=Gaming, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Logitech, L=Fremont, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

786F9512D3157EFD9BA4476044E54D1E

File PE Metadata

Compilation timestamp:

6/15/2010 1:59:28 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

6144:FB8vsYwxIOkUHVHtXznBEs0gP6prcTjMBxlLzBhXYBfIVkpNTis:FkwFHfzn7CpoTjy/pVUt

Entry address:

0x9547

Entry point:

BB, 90, AA, 5F, 91, 93, E9, 20, 01, 00, 00, 3D, E3, 46, 42, EE, 72, 46, 42, 0E, 1E, C8, C6, C6, 46, C6, C6, E6, C6, C6, C6, 25, F7, FC, F7, F6, F7, FF, FD, FC, C6, C6, C6, 3A, 27, 40, 2B, 28, 27, 33, 27, F4, 2A, 32, 32, C6, C6, C6, C6, 22, C6, C6, C6, 0C, 38, 2B, 2B, 12, 2F, 28, 38, 27, 38, 3F, C6, 09, 38, 2B, 27, 3A, 2B, 0A, 2F, 38, 2B, 29, 3A, 35, 38, 3F, 07, C6, C6, C6, C6, 0D, 2B, 3A, 1D, 2F, 34, 2A, 35, 3D, 39, 0A, 2F, 38, 2B, 29, 3A, 35, 38, 3F, 07, C6, C6, C6, C6, 0D, 2B, 3A, 13, 35, 2A, 3B, 32, 2B... 
[+]

Entropy:

7.2028

Code size:

39 KB (39,936 bytes)

Scheduled Task

Task name:

{AA2B46BD-8A1D-4650-8E5F-1600A7AF62AB}

Trigger:

Registration (Runs on registration)

Scan LWEMon.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.