Solved.
Kudos0

Omswat? wa_3rd_party_host_32.exe

I saw this program running on my PC for the first time from a publisher called OMSWAT or something. When i i searched the file, it's

wa_3rd_party_host_32.exe or wa_3rd_party_host_34.exe. Apperantly its located in C:\Program Files\Norton Security\Engine\22.22.6.10.

Any idea what it does?

Accepted Solution
Kudos0

Re: Omswat? wa_3rd_party_host_32.exe

Related: https://software.opswat.com/OESIS_V4/Release_Notes_Log_Windows

I found two files residing in the Norton installation directory. These are related to the Software Updater feature that is within N360. Which I do NOT want to run for any reason. OPSWAT is a 3rd party API developed for distribution of software through secured critical infrastructure. Norton evidently uses it to distribute some features of the Norton 360 suite. https://www.opswat.com/

They are signed by Norton as well.

My solution:

Temporarily disable tamper protection, rename both files to OPSWAT1 and 2 or something of your choosing respectively, then saving the files and a system restart. Afterward, no scans have been performed since. After a few days I deleted both files, ran live updates. The files DID NOT reappear. Software Update still appears in Norton history but the feature has not been installed. 

SA

Replies

Kudos0

Re: Omswat? wa_3rd_party_host_32.exe

Its OPSWAT, inc OESIS V4 3rd Party Host.

Why Norton is using this?

Kudos0

Re: Omswat? wa_3rd_party_host_32.exe

Maxi24:
Any idea what it does?
Why Norton is using this?

IDK

The OESIS Framework is a cross-platform, versatile and modular framework that enables software engineers and technology vendors to build advanced endpoint security products. 

https://www.opswat.com/products/oesis-framework#:


Filename: wa_3rd_party_host_32.exe
Full Path: C:\Program Files\Norton Security\Engine\22.22.6.10\wa_3rd_party_host_32.exe

Developers 
NortonLifeLock Inc.

Version 
2022.5.10.2

File Thumbprint - SHA:
41a09d736966c1ca4ea204a70666f2a50d4c592e4a18866c4d57a1cc0b578863


Filename: wa_3rd_party_host_64.exe
Full Path: C:\Program Files\Norton Security\Engine\22.22.6.10\wa_3rd_party_host_64.exe

Developers 
NortonLifeLock Inc.

Version 
2022.5.10.2

File Thumbprint - SHA:
10df20e8488404cd862634185552c3a065c387502e70a15a96ace53ecf3b2068

Kudos0

Re: Omswat? wa_3rd_party_host_32.exe

Unless you are a developer for Norton, you are not going to know what all the files in the Norton directories are for. They are not going to advertise possible targets for hackers.

Kudos0

Re: Omswat? wa_3rd_party_host_32.exe

I think its used to update/check your software or atleast support it. If you go to My Norton there is a "software-updater". I only used it recently for the first time. a simple scan will open this 3rd party host.

Accepted Solution
Kudos0

Re: Omswat? wa_3rd_party_host_32.exe

Related: https://software.opswat.com/OESIS_V4/Release_Notes_Log_Windows

I found two files residing in the Norton installation directory. These are related to the Software Updater feature that is within N360. Which I do NOT want to run for any reason. OPSWAT is a 3rd party API developed for distribution of software through secured critical infrastructure. Norton evidently uses it to distribute some features of the Norton 360 suite. https://www.opswat.com/

They are signed by Norton as well.

My solution:

Temporarily disable tamper protection, rename both files to OPSWAT1 and 2 or something of your choosing respectively, then saving the files and a system restart. Afterward, no scans have been performed since. After a few days I deleted both files, ran live updates. The files DID NOT reappear. Software Update still appears in Norton history but the feature has not been installed. 

SA

MS Certified Professional / Windows 11 Home 22H2 x 64 build 22621.1265 - Windows 10 Pro x 64 version 22H2 / build 19045.2728 / Norton Security Ultra - Norton 360 Deluxe ver. 22.23.1.21 / Opera GX LVL4 (core: 96.0.4693.104) 64 bit-Early Access w/Norton Chrome Extensions
Kudos0

Re: Omswat? wa_3rd_party_host_32.exe

*language barrier* I didn't understand why you DON'T want it? in plain (simplefied) english? thx.

Kudos0

Re: Omswat? wa_3rd_party_host_32.exe

Maxi24:

*language barrier* I didn't understand why you DON'T want it? in plain (simplefied) english? thx.

R U asking @SoulAsylum ?

Kudos0

Re: Omswat? wa_3rd_party_host_32.exe

The software updater feature is NOT a mature addition to Norton in its present form, it has been inaccurate with getting drivers correctly on other customer machines. I don't use and never will use a third party updater for drivers, etc. because it is risky to the point of rendering a machine unbootable. Many, many years of experience has taught me that lesson more times than I care to admit. I hope that clarifies the extended previous post concerning why I have gone to extremes to irradicate those two file to prevent the feature from being installed.

Edited: I have a gaming rig that cost me almost $5k to build, I wouldn't trust ANY updater software on this machine in any form or fashion. The reasons are terribly obvious. Others mileage and user experiences may vary of course.

SA

MS Certified Professional / Windows 11 Home 22H2 x 64 build 22621.1265 - Windows 10 Pro x 64 version 22H2 / build 19045.2728 / Norton Security Ultra - Norton 360 Deluxe ver. 22.23.1.21 / Opera GX LVL4 (core: 96.0.4693.104) 64 bit-Early Access w/Norton Chrome Extensions
Kudos0

Re: Omswat? wa_3rd_party_host_32.exe

I see.

@BJM: yes it was.

This thread is closed from further comment. Please visit the forum to start a new thread.