Should I block it?
No, this file is 100% safe to run.
Additional versions
(Note, Newsoft Technology Company publishes each variation of this file with the same version, but the hashes are unique.)
Relationships
wrtmon.exe
NsWrtMon Application by Newsoft Technology Company (Signed)
| Version: | 1, 0, 0, 1 |
| MD5: | 233f52fc190f26e143865688029ef907 |
| SHA1: | 36890d5e906a375ddfa76a8c881bcb5c1a1f21d6 |
| SHA256: | 8528de43e251269ccce49329072bc246bfede569dcc532a1f014d5003bddb4dd |
Overview
wrtmon.exe executes as a process with the local user's privileges. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). The file is digitally signed by Newsoft Technology Company which was issued by the VeriSign certificate authority (CA).
Details
| File name: | wrtmon.exe |
| Product name: | NsWrtMon Application |
| Description: | NsWrtMon Microsoft Base Class Application |
| Typical file path: | C:\Windows\System32\spool\drivers\w32x86\3\wrtmon.exe |
| Original name: | NsWrtMon.EXE |
| File version: | 1, 0, 0, 1 |
| Size: | 20 KB (20,480 bytes) |
| Certificate |
| Issued to: | Newsoft Technology Company |
| Authority (CA): | VeriSign |
| Expiration date: | Tuesday, May 4, 2010 |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| Code language: | Microsoft Visual C++ |
| .NET CLR: | No |
More details
Behaviors
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'WrtMon.exe' → C:\WINDOWS\system32\spool\drivers\w32x86\3\WrtMon.exe
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00006020% | |
| Kernel CPU: | 0.00004192% | |
| User CPU: | 0.00001828% | |
| Kernel CPU time: | 250 ms/min | |
| Context switches: | 6/sec | |
| Memory |
| Private memory: | 524 KB | |
| Private (maximum): | 3.12 MB | |
| Private (minimum): | 2.66 MB | |
| Non-paged memory: | 524 KB | |
| Virtual memory: | 18.26 MB | |
| Virtual memory (peak): | 19.01 MB | |
| Working set: | 3.12 MB | |
| Working set (peak): | 3.12 MB | |
| Page faults: | 865/min | |
| I/O |
| I/O read transfer: | 2 Bytes/sec | |
| I/O read operations: | 1/sec | |
| I/O other transfer: | 28 Bytes/sec | |
| I/O other operations: | 1/sec | |
| Resource allocations |
| Threads: | 1 | |
| Handles: | 30 | |
| GUI GDI count: | 24 | |
| GUI USER count: | 9 | |
Process properties
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate |
40.00% |
|
| Microsoft Windows XP |
20.00% |
|
| Windows Vista Home Basic |
20.00% |
|
| Windows 7 Home Premium |
20.00% |
|
Distribution by country
United States installs about 80.00% of NsWrtMon Application.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Hewlett-Packard |
100.00% |
|
