home

wahelper.exe

WatcherHelper Application

Sierra Wireless Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘WatcherHelper’.
Publisher:
Sierra Wireless Inc.  (signed and verified)

Product:
WatcherHelper Application

Description:
WatcherHelper Application

Version:
1, 0, 0, 0

MD5:
e06fb46cf2d3bc17f1091d3a87a7082d

SHA-1:
05e464e73282d1ac10045d6b4477f73fbbd6ccf5

SHA-256:
13684603f48ec6354f63547f4f2c01531ad0437fbaf437effad4f140666c527a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 9:09:48 PM UTC  (today)

File size:
93.5 KB (95,776 bytes)

Product version:
1, 0, 0, 0

Copyright:
Sierra Wireless Inc. Copyright (C) 2006

Trademarks:
Sierra Wireless Inc.

Original file name:
WatcherHelper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\sierra wireless inc\3g watcher\wahelper.exe

Digital Signature
Signed by:
Sierra Wireless Inc.

Authority:
VeriSign, Inc.

Valid from:
10/12/2005 7:00:00 AM

Valid to:
11/22/2006 6:59:59 AM

Subject:
CN=Sierra Wireless Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Sierra Wireless Inc., L=Richmond, S=BC, C=CA

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2353BDA657115AAF34FD0BC86A23B081

File PE Metadata
Compilation timestamp:
6/9/2006 6:13:13 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
1536:UfCyyeBeHcbAxRGdIG1n86Lr3eYtcdHLzcHLzxgolck:Uq+bZdDLTeYtcdHLzcHLzxBck

Entry address:
0x388F

Entry point:
E8, 02, 37, 00, 00, E9, 17, FE, FF, FF, 55, 8B, EC, 83, EC, 04, 89, 7D, FC, 8B, 7D, 08, 8B, 4D, 0C, C1, E9, 07, 66, 0F, EF, C0, EB, 08, 8D, A4, 24, 00, 00, 00, 00, 90, 66, 0F, 7F, 07, 66, 0F, 7F, 47, 10, 66, 0F, 7F, 47, 20, 66, 0F, 7F, 47, 30, 66, 0F, 7F, 47, 40, 66, 0F, 7F, 47, 50, 66, 0F, 7F, 47, 60, 66, 0F, 7F, 47, 70, 8D, BF, 80, 00, 00, 00, 49, 75, D0, 8B, 7D, FC, 8B, E5, 5D, C3, 55, 8B, EC, 83, EC, 10, 89, 7D, FC, 8B, 45, 08, 99, 8B, F8, 33, FA, 2B, FA, 83, E7, 0F, 33, FA, 2B, FA, 85, FF, 75, 3C, 8B...
 
[+]

Code size:
48 KB (49,152 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
WatcherHelper

Command:
"C:\Program Files\sierra wireless inc\3g watcher\wahelper.exe"


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.