Should I block it?

No, this file is 100% safe to run.

Additional versions

1, 0, 0, 1	20.00%
1, 0, 0, 1	60.00%
1, 0, 0, 1	20.00%

(Note, Newsoft Technology Company publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

wrtproc.exe (NsWrtProc Application by Newsoft Technology Company)

wrtmon.exe

NsWrtMon Application by Newsoft Technology Company (Signed)

Remove wrtmon.exe

Version:	1, 0, 0, 1
MD5:	29cacc44a376bfd8cba52ad24d07f2f3
SHA1:	31de9e8e326df41fe8564e7c3b2e33ca527a8de6
SHA256:	b66ec723c5e43406ec8f3a1756b3681c2e5fef922f4a558c49e25bc677f058e2

Overview

wrtmon.exe executes as a process with the local user's privileges. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). The file is digitally signed by Newsoft Technology Company which was issued by the VeriSign certificate authority (CA).

Details

File name:	wrtmon.exe
Product name:	NsWrtMon Application
Description:	NsWrtMon Microsoft Base Class Application
Typical file path:	C:\Windows\System32\spool\drivers\w32x86\3\wrtmon.exe
Original name:	NsWrtMon.EXE
File version:	1, 0, 0, 1
Size:	26.08 KB (26,704 bytes)
Certificate
Issued to:	Newsoft Technology Company
Authority (CA):	VeriSign
Expiration date:	Tuesday, May 4, 2010
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No

More details

Behaviors

Startup files (all users) run

Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'WrtMon.exe' → C:\WINDOWS\system32\spool\drivers\w32x86\3\WrtMon.exe

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00000238%	0.028634%
Kernel CPU:	0.00000238%	0.013761%
Kernel CPU time:	16 ms/min	100,923,805ms/min
CPU cycles:	408,321/sec	17,470,203/sec
Context switches:	5/sec	284/sec
Memory
Private memory:	1.46 MB	21.59 MB
Private (maximum):	5.75 MB
Private (minimum):	5.52 MB
Non-paged memory:	1.46 MB	21.59 MB
Virtual memory:	66.84 MB	140.96 MB
Virtual memory (peak):	73.28 MB	169.69 MB
Working set:	5.75 MB	18.61 MB
Working set (peak):	5.75 MB	37.95 MB
Page faults:	1,526/min	2,039/min
I/O
I/O read transfer:	0 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O other transfer:	0 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	1	12
Handles:	60	600
GUI GDI count:	16	103
GUI GDI peak:	18	142
GUI USER count:	14	49
GUI USER peak:	16	71