Should I block it?

No, this file is 100% safe to run.

Additional versions

5.80.4	1.12%
5.60.73	14.61%
5.52.29	1.12%
5.52.29	7.87%
5.50.98	13.48%
5.33.14	19.10%
5.33.14	6.74%
5.30.67	1.12%
5.30.67	2.25%
5.20.51	3.37%
5.20.51	1.12%
5.10.9	1.12%
4.82.11	10.11%
4.82.11	1.12%
4.82.4	5.62%
4.82.4	3.37%
4.80.169	2.25%
4.80.154	1.12%
4.80.154	1.12%
4.24.28	1.12%
4.24.28	1.12%

Relationships

Parent process

setpoint.exe (Logitech SetPoint by Logitech)

Related files

PE file structure

Show functions

Import table

advapi32.dll

SetEntriesInAclA, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, FreeSid, RegOpenKeyExA, RegCreateKeyExA, RegSetValueExA, RegOpenKeyA, RegQueryValueExA, RegCloseKey, AllocateAndInitializeSid

kernel32.dll

CreateMutexA, CreateEventA, SetEvent, GetProcessHeap, CreateDirectoryA, CreateFileA, InterlockedIncrement, InterlockedDecrement, CloseHandle, InterlockedCompareExchange, SetLastError, TerminateThread, ReleaseMutex, WaitForMultipleObjects, OutputDebugStringA, SetFilePointer, WriteFile, MoveFileExA, GetLocalTime, CreateThread, GetStartupInfoA, GetModuleFileNameA, GetModuleHandleExA, QueryPerformanceCounter, DebugBreak, MapViewOfFile, LocalFree, CreateFileMappingA, LocalAlloc, FlushFileBuffers, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, WaitForSingleObject, HeapFree, GetCurrentProcessId, GetCurrentThreadId, HeapValidate, HeapAlloc, LoadLibraryA, GetLastError, GetProcAddress, FreeLibrary, CreateProcessA, Sleep, GetStringTypeW, GetStringTypeA, LCMapStringW, GetCommandLineA, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetModuleHandleW, ExitProcess, GetStdHandle, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStringsW, SetHandleCount, GetFileType, DeleteCriticalSection, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, HeapCreate, VirtualFree, GetTickCount, GetSystemTimeAsFileTime, LeaveCriticalSection, EnterCriticalSection, InitializeCriticalSectionAndSpinCount, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, VirtualAlloc, HeapReAlloc, RtlUnwind, GetConsoleCP, GetConsoleMode, HeapSize, GetLocaleInfoA, LCMapStringA, MultiByteToWideChar, GetVersionExA, GetModuleHandleA, HeapDestroy, InitializeCriticalSection

setupapi.dll

SetupDiEnumDeviceInterfaces, SetupDiGetDeviceInterfaceDetailA, SetupDiEnumDeviceInfo, SetupDiDestroyDeviceInfoList, SetupDiGetClassDevsA

shell32.dll

SHGetSpecialFolderPathA

user32.dll

GetSystemMetrics, SystemParametersInfoA, RegisterClassA, CreateWindowExA, ShowWindow, UnregisterDeviceNotification, RegisterDeviceNotificationA, wsprintfA

KHALMNPR.exe

Logitech SetPoint by Logitech (Signed)

Remove KHALMNPR.exe

Version:	5.20.51
MD5:	fde8528e53772ccc37a9297a5bce6876
SHA1:	6911972a7a0e910263178613d16edf922a19ba1c

What is KHALMNPR.exe?

Logitech KHAL Main Process for SetPoint is Logitech's driver suite for its mouse and keyboard products. It has three sections: Mouse Button Settings, which allows the user to change the function of each button and have different settings for different programs; Mouse Movement where movement settings and sensitivity can be changed; and Mouse Game Settings, in which the gamers can change settings for in-game functions.

About KHALMNPR.exe (from Logitech)

“Your keyboard isn’t just for typing. Many can launch Web pages and applications, control your media, and sometimes even show you what song is playing. With Logitech SetPoint software, you can not only”

Details

File name:	khalmnpr.exe
Publisher:	Logitech, Inc.
Product name:	Logitech SetPoint
Description:	Logitech KHAL Main Process
Typical file path:	C:\Program Files\common files\logishrd\khal3\khalmnpr.exe
File version:	5.20.51
Size:	222.58 KB (227,920 bytes)
Build date:	11/9/2010 1:41 PM
Certificate
Issued to:	Logitech
Authority (CA):	VeriSign
Effective date:	Thursday, April 28, 2011
Expiration date:	Sunday, April 28, 2013
Digital DNA
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No

More details

Behaviors

Startup files (all users) run

Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'Kernel and Hardware Abstraction Layer' → KHALMNPR.EXE

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00031792%	0.028634%
Kernel CPU:	0.00010336%	0.013761%
User CPU:	0.00021456%	0.014873%
Kernel CPU time:	1,435 ms/min	100,923,805ms/min
CPU cycles:	209,070/sec	17,470,203/sec
Context switches:	4/sec	284/sec
Memory
Private memory:	5.08 MB	21.59 MB
Private (maximum):	11.23 MB
Private (minimum):	1.05 MB
Non-paged memory:	5.08 MB	21.59 MB
Virtual memory:	111.31 MB	140.96 MB
Virtual memory (peak):	113.31 MB	169.69 MB
Working set:	3.47 MB	18.61 MB
Working set (peak):	11.23 MB	37.95 MB
Page faults:	9,982/min	2,039/min
I/O
I/O read transfer:	42 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	11 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	5 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	30	12
Handles:	306	600
GUI GDI count:	9	103
GUI GDI peak:	10	142
GUI USER count:	24	49
GUI USER peak:	32	71

Process properties

Integrety level:	Medium
Platform:	64-bit
Command line:	khalmnpr.exe /api
Owner:	User
Parent process:	setpoint.exe (Logitech SetPoint by Logitech)

Threads