Should I block it?
No, this file is 100% safe to run.
Relationships
Parent process
Child process
Related files
KHALScroll.exe
ScrollApp by Logitech (Signed)
Version: | 4.00.33 |
MD5: | 9677563a516ecb35deea367d5948d6f2 |
SHA1: | b1b80970626598fe97d44df425f934c614ef00ff |
SHA256: | 4851521b41907df959810143dbb8e55b83e36e7b8ad8e5d178de1f44d5b4367b |
Overview
khalscroll.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Logitech which was issued by the VeriSign certificate authority (CA).
Details
File name: | khalscroll.exe |
Publisher: | Logitech, Inc. |
Product name: | ScrollApp |
Description: | Logitech ScrollApp (UNICODE) |
Typical file path: | C:\Program Files\logitech\flowscroll\khalscroll.exe |
File version: | 4.00.33 |
Size: | 162.77 KB (166,680 bytes) |
Certificate |
Issued to: | Logitech |
Authority (CA): | VeriSign |
Effective date: | Wednesday, April 27, 2011 |
Expiration date: | Saturday, April 27, 2013 |
Digital DNA |
File packed: | No |
Code language: | Microsoft Visual C# / Basic .NET |
.NET CLR: | Yes |
.NET NGENed: | No |
More details
Behaviors
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'LogiScrollApp' → C:\Program Files\Logitech\FlowScroll\KhalScroll.exe
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
CPU |
Total CPU: | 0.00051060% | |
Kernel CPU: | 0.00036934% | |
User CPU: | 0.00014126% | |
Kernel CPU time: | 20,319 ms/min | |
Context switches: | 101/sec | |
Memory |
Private memory: | 30.11 MB | |
Private (maximum): | 21.73 MB | |
Private (minimum): | 13.07 MB | |
Non-paged memory: | 30.11 MB | |
Virtual memory: | 133.09 MB | |
Virtual memory (peak): | 159.49 MB | |
Working set: | 14.96 MB | |
Working set (peak): | 25.26 MB | |
Page faults: | 19,203/min | |
Resource allocations |
Threads: | 14 | |
Handles: | 197 | |
GUI GDI count: | 11 | |
GUI GDI peak: | 12 | |
GUI USER count: | 12 | |
GUI USER peak: | 14 | |
Process properties
Threads
Averages
KhalScroll.exe (main module) |
Total CPU: | 0.03517589% | |
Kernel CPU: | 0.01691239% | |
User CPU: | 0.01826350% | |
CPU cycles: | 5,734,244/sec | |
Context switches: | 16/sec | |
Memory: | 176 KB | |
ntdll.dll |
Total CPU: | 0.00460669% | |
Kernel CPU: | 0.00325384% | |
User CPU: | 0.00135285% | |
CPU cycles: | 168,514/sec | |
Memory: | 1.66 MB | |
khalapi.dll (Logitech SetPoint by Logitech) |
Total CPU: | 0.00153520% | |
Kernel CPU: | 0.00082664% | |
User CPU: | 0.00070855% | |
CPU cycles: | 37,661/sec | |
Memory: | 860 KB | |
KHALSmooth.DLL |
Total CPU: | 0.00083505% | |
Kernel CPU: | 0.00067905% | |
User CPU: | 0.00015599% | |
CPU cycles: | 529,791/sec | |
Context switches: | 13/sec | |
Memory: | 52 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
OS version | distribution |
Windows 7 Home Premium |
66.67% |
|
Windows 7 Professional |
33.33% |
|
Distribution by country
United States installs about 100.00% of ScrollApp.
Distribution by PC manufacturer
PC Manufacturer | distribution |
Toshiba |
100.00% |
|