wrtmon.exe may be a dangerous application, according to an automatic analysis of the program's operation. It triggers many of the "probable danger" flags detailed in this document. It is not yet known if wrtmon.exe is a virus or not that doesn't harm your computer. We recommend you to be careful with this application.
This application is normally stored on disk in C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe.
The MD5 checksum for this program is 32f1a63c86d009d95994b543511d6e5c.
This application does NOT operate as a Windows service. This is normally a good sign.
This exe runs as a 32-bit program. It does not use the full set of features of modern PC processors. This is quite normal because the makers did not bother to upgrade it to use the x64 instruction set.
The description written in the program is NsWrtMon Microsoft Base Class Application.
File version extracted from the file 1, 0, 0, 1.
Intellectual property rights notice Copyright (C) 2006.
This application does NOT have visible elements of user interface. This is most likely a bad thing.
The digital certificate is missing from this program. The maker did not sign it. This is usually bad.
This program is registered to start when the computer boots. Yes
This executable does NOT have a removal routine stored in registry.