home

wahelper.exe

WatcherHelper Application

Sierra Wireless Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘WatcherHelper’.
Publisher:
Sierra Wireless Inc.  (signed and verified)

Product:
WatcherHelper Application

Description:
WatcherHelper Application

Version:
1, 0, 0, 0

MD5:
4a92b63bb9bfe8882feb9457ecf7f606

SHA-1:
8bf480b86beb5bb89a3ecfab0b30ac15ff062fd4

SHA-256:
1dd8e089a7bdafa6967648890b358282bb0b3e8b7771d72c8221458e993881a5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 5:42:40 PM UTC  (today)

File size:
93.5 KB (95,776 bytes)

Product version:
1, 0, 0, 0

Copyright:
Sierra Wireless Inc. Copyright (C) 2006

Trademarks:
Sierra Wireless Inc.

Original file name:
WatcherHelper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\sierra wireless inc\watcher\wahelper.exe

Digital Signature
Signed by:
Sierra Wireless Inc.

Authority:
VeriSign, Inc.

Valid from:
10/12/2005 2:00:00 AM

Valid to:
11/22/2006 12:59:59 AM

Subject:
CN=Sierra Wireless Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Sierra Wireless Inc., L=Richmond, S=BC, C=CA

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2353BDA657115AAF34FD0BC86A23B081

File PE Metadata
Compilation timestamp:
6/9/2006 1:13:13 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
1536:LfCyyeBeHcbAxRGdIG1n86Lr3eYtcdHLzcHLzxgol6:Lq+bZdDLTeYtcdHLzcHLzxB6

Entry address:
0x388F

Entry point:
E8, 02, 37, 00, 00, E9, 17, FE, FF, FF, 55, 8B, EC, 83, EC, 04, 89, 7D, FC, 8B, 7D, 08, 8B, 4D, 0C, C1, E9, 07, 66, 0F, EF, C0, EB, 08, 8D, A4, 24, 00, 00, 00, 00, 90, 66, 0F, 7F, 07, 66, 0F, 7F, 47, 10, 66, 0F, 7F, 47, 20, 66, 0F, 7F, 47, 30, 66, 0F, 7F, 47, 40, 66, 0F, 7F, 47, 50, 66, 0F, 7F, 47, 60, 66, 0F, 7F, 47, 70, 8D, BF, 80, 00, 00, 00, 49, 75, D0, 8B, 7D, FC, 8B, E5, 5D, C3, 55, 8B, EC, 83, EC, 10, 89, 7D, FC, 8B, 45, 08, 99, 8B, F8, 33, FA, 2B, FA, 83, E7, 0F, 33, FA, 2B, FA, 85, FF, 75, 3C, 8B...
 
[+]

Code size:
48 KB (49,152 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
WatcherHelper

Command:
"C:\Program Files\sierra wireless inc\watcher\wahelper.exe"


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.