home

WNetWatcher.exe

Wireless Network Watcher

Nir Sofer

This is a setup program which is used to install the application. This is installed with NirSoft Wireless Network Watcher. The file has been seen being downloaded from onedrive.live.com and multiple other hosts.
Publisher:
NirSoft  (signed by Nir Sofer)

Product:
Wireless Network Watcher

Version:
1.58

MD5:
bd4df5eeaacf54fcd75f54d88703bf6f

SHA-1:
29be2bc2e905aeb93b9d4dbc91a139c28fb592fb

SHA-256:
dbdea2f6b59a650407d67b7e57ecd2081e5d3ca8a857cb33a6d25e716a9c4def

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 2:32:16 AM UTC  (today)

File size:
768.1 KB (786,528 bytes)

Product version:
1.58

Copyright:
Copyright © 2011 - 2013 Nir Sofer

Original file name:
WNetWatcher.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Nir Sofer

Authority:
COMODO CA Limited

Valid from:
9/16/2012 9:00:00 PM

Valid to:
9/17/2014 8:59:59 PM

Subject:
CN=Nir Sofer, O=Nir Sofer, STREET=5 Hashoshanim st., L=Ramat Gan, S=Gush Dan, PostalCode=52583, C=IL

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00A1A3E7280E0A2DF12F84309649820519

File PE Metadata
Compilation timestamp:
2/20/2013 7:56:09 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:686f5LMiT0zZEQ8CbcQJOow2gqlahiQ14zrISUc3:686f5LMiT0dEQ8CbcQJOow2gqlahiQ1E

Entry address:
0xD9D6

Entry point:
6A, 70, 68, 20, E4, 40, 00, E8, 02, 02, 00, 00, 33, FF, 57, FF, 15, 94, E0, 40, 00, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03, C8, 81, 39, 50, 45, 00, 00, 75, 12, 0F, B7, 41, 18, 3D, 0B, 01, 00, 00, 74, 1F, 3D, 0B, 02, 00, 00, 74, 05, 89, 7D, E4, EB, 27, 83, B9, 84, 00, 00, 00, 0E, 76, F2, 33, C0, 39, B9, F8, 00, 00, 00, EB, 0E, 83, 79, 74, 0E, 76, E2, 33, C0, 39, B9, E8, 00, 00, 00, 0F, 95, C0, 89, 45, E4, 89, 7D, FC, 6A, 02, 5B, 53, FF, 15, 00, E3, 40, 00, 59, 83, 0D, E0, 36, 41, 00, FF, 83, 0D, E4, 36...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v7.1

Code size:
52 KB (53,248 bytes)

The file WNetWatcher.exe has been discovered within the following program.

NirSoft Wireless Network Watcher  by NirSoft
Publisher's description - “Wireless Network Watcher is a small utility that scans your wireless network and displays the list of all computers and devices that are currently connected to your network.”
www.nirsoft.net/utils/wireless_network_watcher.html
5% remove it
 
Powered by Should I Remove It?

The file WNetWatcher.exe has been seen being distributed by the following 2 URLs.

https://onedrive.live.com/download.aspx?cid=4C2D9E99696527E8&resid=4C2D9E99696527E8!212703&canary=W8H8A NPNkPvnb4zAfhOZgSpWIu6KS PvRs4TKRvZZo=0&ithint=.exe

ftp://servidorshn.ddns.net/APPs/.../WNetWatcher (1).exe

Scan WNetWatcher.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.