Try now

Program info

Estimated safety rating


wrtmon.exe may be a dangerous application, according to an automatic analysis of the program's operation. It triggers many of the "probable danger" flags detailed in this document. It is not yet known if wrtmon.exe is a virus or not that doesn't harm your computer. We recommend you to be careful with this application.

Executable file path


This application is normally stored on disk in C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe.

MD5 hash of the executable file


The MD5 checksum for this program is 32f1a63c86d009d95994b543511d6e5c.

Is running as a service


This application does NOT operate as a Windows service. This is normally a good sign.

Is a 32 bit executable file


This exe runs as a 32-bit program. It does not use the full set of features of modern PC processors. This is quite normal because the makers did not bother to upgrade it to use the x64 instruction set.

File description

 NsWrtMon Microsoft Base Class Application

The description written in the program is NsWrtMon Microsoft Base Class Application.

File version

 1, 0, 0, 1

File version extracted from the file 1, 0, 0, 1.


 Copyright (C) 2006

Intellectual property rights notice Copyright (C) 2006.

Has valid windows


This application does NOT have visible elements of user interface. This is most likely a bad thing.

Digitally signed


The digital certificate is missing from this program. The maker did not sign it. This is usually bad.

Starts with windows


This program is registered to start when the computer boots. Yes

Can be uninstalled


This executable does NOT have a removal routine stored in registry.