Should I block it?

No, this file is 100% safe to run.

Additional versions

4.00.101	12.50%
4.00.101	50.00%
3.30.152	25.00%
3.1.82	12.50%

Relationships

Parent process

SetPoint.exe (Logitech SetPoint by Logitech)

Related files

PE file structure

Show functions

Import table

advapi32.dll

RegQueryValueExA, RegCloseKey, RegCreateKeyExA, RegSetValueExA, RegOpenKeyExA

kernel32.dll

LoadLibraryA, GetLastError, GetProcAddress, FreeLibrary, GetCommandLineA, HeapFree, GetVersionExA, HeapAlloc, GetProcessHeap, GetStartupInfoA, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetModuleHandleA, ExitProcess, WriteFile, GetStdHandle, GetModuleFileNameA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStringsW, SetHandleCount, GetFileType, DeleteCriticalSection, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, GetCurrentThreadId, InterlockedDecrement, HeapDestroy, HeapCreate, VirtualFree, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, LeaveCriticalSection, EnterCriticalSection, InitializeCriticalSection, GetCPInfo, GetACP, GetOEMCP, Sleep, VirtualAlloc, HeapReAlloc, RtlUnwind, HeapSize, MultiByteToWideChar, GetLocaleInfoA, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW

user32.dll

SystemParametersInfoA

KHALMNPR.exe

Logitech SetPoint by Logitech (Signed)

Remove KHALMNPR.exe

Version:	4.00.101
MD5:	f6d01b49cefe36286a1fd8bae8f2d6a3
SHA1:	d7ee8f44e0ba07b6d7f63a244da6edb5c17bd504
SHA256:	366e99603fba0f7ff7f7564b062ac1cd51113e679e71c39f8c72fcd89af85ac5

Overview

khalmnpr.exe executes as a process with the local user's privileges typically within the context of its parent SetPoint.exe (Logitech SetPoint by Logitech). It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). This is typically installed with the program Logitech Updater published by Logitech Inc.. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Logitech which was issued by the VeriSign certificate authority (CA).

Details

File name:	khalmnpr.exe
Publisher:	Logitech Inc.
Product name:	Logitech SetPoint
Description:	Logitech KHAL Main Process
Typical file path:	C:\windows\khalmnpr.exe
File version:	4.00.101
Size:	54.77 KB (56,080 bytes)
Certificate
Issued to:	Logitech
Authority (CA):	VeriSign
Effective date:	Tuesday, December 12, 2006
Expiration date:	Wednesday, December 12, 2007
Digital DNA
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No

More details

Programs

The following program will install this file

Logitech Updater

Logitech Inc.

11% remove

Logitech Updater is the software update program that runs with Windows in the background and checks for updates, and automatically downloads and installs them if found based on the user's settings. The program can be configured by the user for maintaining a schedule for when to check the remote server for periodic software updates. If it finds an item to download, it will download and install the new update. It is designed to keep any...

Behaviors

Startup files (all users) run

Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'Kernel and Hardware Abstraction Layer' → KHALMNPR.EXE

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00004966%	0.028634%
Kernel CPU:	0.00004137%	0.013761%
User CPU:	0.00000830%	0.014873%
Kernel CPU time:	102 ms/min	100,923,805ms/min
CPU cycles:	1,021/sec	17,470,203/sec
Memory
Private memory:	4.62 MB	21.59 MB
Private (maximum):	6.8 MB
Private (minimum):	4.42 MB
Non-paged memory:	4.62 MB	21.59 MB
Virtual memory:	78.17 MB	140.96 MB
Virtual memory (peak):	78.17 MB	169.69 MB
Working set:	4.51 MB	18.61 MB
Working set (peak):	6.8 MB	37.95 MB
Page faults:	1,827/min	2,039/min
I/O
I/O read transfer:	17 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	0 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	2 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	26	12
Handles:	268	600
GUI GDI count:	6	103
GUI USER count:	20	49

Process properties

Integrety level:	Medium
Platform:	32-bit
Command line:	khalmnpr.exe /api
Owner:	User
Parent process:	SetPoint.exe (Logitech SetPoint by Logitech)

Threads

Averages

KHALMNPR.EXE (main module)
Total CPU:	0.00004087%	0.272967%
Kernel CPU:	0.00003242%	0.107585%
User CPU:	0.00000845%	0.165382%
CPU cycles:	674/sec	5,741,424/sec
Memory:	52 KB	1.16 MB
khalapi.dll (Logitech SetPoint by Logitech)
Total CPU:	0.00000705%
Kernel CPU:	0.00000705%
User CPU:	0.00000000%
CPU cycles:	25/sec
Memory:	180 KB
khalhpp.dll (Logitech SetPoint by Logitech)
Total CPU:	0.00000564%
Kernel CPU:	0.00000564%
User CPU:	0.00000000%
CPU cycles:	72/sec
Memory:	176 KB
khalhid.dll (Logitech SetPoint by Logitech)
Total CPU:	0.00000564%
Kernel CPU:	0.00000564%
User CPU:	0.00000000%
CPU cycles:	8/sec
Memory:	112 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Distribution by Windows OS

OS version	distribution
Windows Vista Home Premium	37.50%
Microsoft Windows XP	25.00%
Windows 7 Ultimate	12.50%
Windows Vista Ultimate	12.50%
Windows 7 Enterprise	12.50%

Distribution by country

United States installs about 62.50% of Logitech SetPoint.

Distribution by PC manufacturer

PC Manufacturer	distribution
Hewlett-Packard	75.00%
GIGABYTE	25.00%

Remove Adware and Spyware Programs, FREE Download!