home

NwmSvc.exe

NightWatchman

1E

It runs as a separate (within the context of its own process) windows Service named “1E NightWatchman”. This is installed with 1E Agent.
Publisher:
1E  (signed and verified)

Product:
NightWatchman

Description:
NightWatchman Service

Version:
6.5.0.461 r168567

MD5:
1f44d13750e0162fe8081c5027822c70

SHA-1:
d48cd0f29c454907032485cae7b738e39fba9e0b

SHA-256:
bd9466151a388131495bd8bb5c5d989e72e9b22180e2ed70552459300895de1b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 9:43:13 AM UTC  (today)

File size:
1015.3 KB (1,039,680 bytes)

Product version:
6.5.0.461 r168567

Copyright:
Copyright © 1E 2000-2013. All rights reserved.

Trademarks:
1E (R) and NightWatchman (R) are registered trademarks of 1E Ltd.

Original file name:
NwmSvc.exe

File type:
Executable application (Win32 EXE)

Language:
English (United Kingdom)

Common path:
C:\Program Files\1e\agent\nightwatchman\nwmsvc.exe

Digital Signature
Signed by:
1E

Authority:
VeriSign, Inc.

Valid from:
5/13/2012 7:00:00 PM

Valid to:
6/11/2015 6:59:59 PM

Subject:
CN=1E, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=1E, L=Ealing, S=London, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0F8CC1D7D82394CD73AE32E7D0E9064C

File PE Metadata
Compilation timestamp:
6/24/2013 1:32:51 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
10.0

CTPH (ssdeep):
12288:BO/VnkNwna0BZo22z9/NxHFaSPDRbe+nXalTvgqQvDxgvDQFY87h+u4rpX7gaXOL:M/VkiK209fpel+YM4SaXODojiTU+8Q

Entry address:
0x9D820

Entry point:
E8, 2E, 06, 00, 00, E9, B3, FD, FF, FF, FF, 25, 60, D5, 4A, 00, FF, 25, 64, D5, 4A, 00, FF, 25, 68, D5, 4A, 00, CC, CC, CC, CC, 51, 8D, 4C, 24, 04, 2B, C8, 1B, C0, F7, D0, 23, C8, 8B, C4, 25, 00, F0, FF, FF, 3B, C8, 72, 0A, 8B, C1, 59, 94, 8B, 00, 89, 04, 24, C3, 2D, 00, 10, 00, 00, 85, 00, EB, E9, CC, CC, CC, CC, CC, 8B, 44, 24, 08, 8B, 4C, 24, 10, 0B, C8, 8B, 4C, 24, 0C, 75, 09, 8B, 44, 24, 04, F7, E1, C2, 10, 00, 53, F7, E1, 8B, D8, 8B, 44, 24, 08, F7, 64, 24, 14, 03, D8, 8B, 44, 24, 08, F7, E1, 03, D3...
 
[+]

Entropy:
6.5674

Code size:
686.5 KB (702,976 bytes)

Service
Display name:
1E NightWatchman

Service name:
NightWatchman

Description:
Provides services which enable PC power management.

Type:
Win32OwnProcess


The file NwmSvc.exe has been discovered within the following program.

1E Agent
Publisher's description - “1E WakeUp which is part of the 1E agent ensures that all PCs targeted for software distribution are turned on and ready to receive it, reducing the chance that a PC will miss a vital patch.”
www.1E.com
About 1% of users remove it
 
Powered by Should I Remove It?

Scan NwmSvc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.