Estimated safety rating

wrtmon.exe may be a dangerous application, according to an automatic analysis of the program's operation. It triggers many of the "probable danger" flags detailed in this document. It is not yet known if wrtmon.exe is a virus or not that doesn't harm your computer. We recommend you to be careful with this application.

Executable file path

This application is normally stored on disk in C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe.

MD5 hash of the executable file

The MD5 checksum for this program is 32f1a63c86d009d95994b543511d6e5c.

Is running as a service

This application does NOT operate as a Windows service. This is normally a good sign.

Is a 32 bit executable file

This exe runs as a 32-bit program. It does not use the full set of features of modern PC processors. This is quite normal because the makers did not bother to upgrade it to use the x64 instruction set.

File description

The description written in the program is NsWrtMon Microsoft Base Class Application.

File version

File version extracted from the file 1, 0, 0, 1.

Copyright

Intellectual property rights notice Copyright (C) 2006.

Has valid windows

This application does NOT have visible elements of user interface. This is most likely a bad thing.

Digitally signed

The digital certificate is missing from this program. The maker did not sign it. This is usually bad.

Starts with windows

This program is registered to start when the computer boots. Yes

Can be uninstalled

This executable does NOT have a removal routine stored in registry.