home

WaHelper.exe

WatcherHelper Application

Sierra Wireless Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘WatcherHelper’.
Publisher:
Sierra Wireless Inc.  (signed and verified)

Product:
WatcherHelper Application

Description:
WatcherHelper Application

Version:
11.1.0.0

MD5:
4eaab23589ae493a1c6af674b3fcc8ad

SHA-1:
7dbc21fc798276e9ec783cfdcdb767f8a049ada6

SHA-256:
e6b0071b940040e6689889eb2eed74112e2b91713a605c31d05666ed82f4f3a1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/25/2024 7:22:00 AM UTC  (today)

File size:
113.4 KB (116,080 bytes)

Product version:
11.1.0.0

Copyright:
Sierra Wireless Inc. Copyright (C) 2011

Trademarks:
Sierra Wireless Inc.

Original file name:
WaHelper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\sierra wireless inc\3g watcher\wahelper.exe

Digital Signature
Signed by:
Sierra Wireless Inc.

Authority:
VeriSign, Inc.

Valid from:
11/25/2009 7:00:00 AM

Valid to:
11/26/2012 6:59:59 AM

Subject:
CN=Sierra Wireless Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Sierra Wireless Inc., L=Richmond, S=British Columbia, C=CA

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
507E284AE7EFE2D7EAA5FC5DAF3D8A02

File PE Metadata
Compilation timestamp:
1/11/2011 8:43:00 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
1536:eN560DFIzCbR9GmIVGjMGXkk2iStzoUoOMYoOMEae1iCQ:C55bOTRYStzoUogosae8

Entry address:
0x3D1A

Entry point:
E8, 3E, 46, 00, 00, E9, 17, FE, FF, FF, 6A, 0C, 68, 90, 09, 41, 00, E8, E8, 36, 00, 00, 8B, 75, 08, 85, F6, 74, 75, 83, 3D, E0, 4D, 41, 00, 03, 75, 43, 6A, 04, E8, 20, 48, 00, 00, 59, 83, 65, FC, 00, 56, E8, 8E, 48, 00, 00, 59, 89, 45, E4, 85, C0, 74, 09, 56, 50, E8, AA, 48, 00, 00, 59, 59, C7, 45, FC, FE, FF, FF, FF, E8, 0B, 00, 00, 00, 83, 7D, E4, 00, 75, 37, FF, 75, 08, EB, 0A, 6A, 04, E8, 0E, 47, 00, 00, 59, C3, 56, 6A, 00, FF, 35, 0C, 3B, 41, 00, FF, 15, B8, E0, 40, 00, 85, C0, 75, 16, E8, 0D, 26, 00...
 
[+]

Entropy:
5.9716

Code size:
52 KB (53,248 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
WatcherHelper

Command:
"C:\Program Files\sierra wireless inc\3g watcher\wahelper.exe"


Scan WaHelper.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.