Does anyone know the function and origin of the wireless profile, bungle4?

I've been cleaning up my numerous vbScript files and when I tidied, then tested Metered.vbs, it produced the following:

D:\>metered

Profiles on interface Wi-Fi:
    All User Profile     : bungle4
    All User Profile     : mynet

Metered.vbs is a script I wrote that runs netsh to enable/disable the metered connection status on my wireless so that Windows Update will (hopefully) not download massive updates when I am at the cottage on a connection with a small data cap. When run without parameters it just lists the wireless profiles. I was very surprised to see bungle4 and my Google searches so far have proven fruitless. The output below may shed some light and I am hoping someone out there will be able to explain what bungle4 is an how it might have appeared on my computer.

My wireless devices are:

five laptops
one Chromecast

It is possible that Chromecase uses this ridiculously named entry but I would like to verify this is the case. Below is the output from netsh wlan show all in three parts with the bungle4 piece separated.

D:\>netsh wlan show all
Wireless System Information Summary
(Time: 2018-02-13 16:09:31 Central Standard Time)

=======================================================================
============================== SHOW DRIVERS ===========================
=======================================================================

Interface name: Wi-Fi

    Driver                    : Intel(R) Dual Band Wireless-AC 3160
    Vendor                    : Intel Corporation
    Provider                  : Intel
    Date                      : 2017-04-05
    Version                   : 18.33.7.2
    INF file                  : oem14.inf
    Type                      : Native Wi-Fi Driver
    Radio types supported     : 802.11b 802.11g 802.11n 802.11a 802.11ac
    FIPS 140-2 mode supported : Yes
    802.11w Management Frame Protection supported : Yes
    Hosted network supported  : Yes
    Authentication and cipher supported in infrastructure mode:
                                Open            None
                                Open            WEP-40bit
                                Open            WEP-104bit
                                Open            WEP
                                WPA-Enterprise  TKIP
                                WPA-Enterprise  CCMP
                                WPA-Personal    TKIP
                                WPA-Personal    CCMP
                                WPA2-Enterprise TKIP
                                WPA2-Enterprise CCMP
                                WPA2-Personal   TKIP
                                WPA2-Personal   CCMP
                                Open            Vendor defined
                                Vendor defined  Vendor defined
    Authentication and cipher supported in ad-hoc mode:
                                Open            None
                                Open            WEP-40bit
                                Open            WEP-104bit
                                Open            WEP
                                WPA2-Personal   CCMP
    IHV service present       : Yes
    IHV adapter OUI           : [00 80 86], type: [00]
    IHV extensibility DLL path: C:\Windows\System32\IWMSSvc.dll
    IHV UI extensibility ClSID: {1bf6cb2d-2ae0-4879-a7aa-a75834fbd0e3}
    IHV diagnostics CLSID     : {00000000-0000-0000-0000-000000000000}
    Wireless Display Supported: Yes (Graphics Driver: Yes, Wi-Fi Driver: Yes)

=======================================================================
============================= SHOW INTERFACES =========================
=======================================================================

There is 1 interface on the system:

    Name                   : Wi-Fi
    Description            : Intel(R) Dual Band Wireless-AC 3160
    GUID                   : 819b4111-ccf5-4ff4-989a-7912877052e3
    Physical address       : 2c:6e:85:50:01:4f
    State                  : connected
    SSID                   : mynet
    BSSID                  : 00:21:29:9b:55:0f
    Network type           : Infrastructure
    Radio type             : 802.11g
    Authentication         : WPA2-Personal
    Cipher                 : CCMP
    Connection mode        : Auto Connect
    Channel                : 6
    Receive rate (Mbps)    : 54
    Transmit rate (Mbps)   : 54
    Signal                 : 99%
    Profile                : mynet

    Hosted network status  : Not available

=======================================================================
=========================== SHOW HOSTED NETWORK =======================
=======================================================================

Hosted network settings
-----------------------
    Mode                   : Allowed
    Settings               : <Not configured>

Hosted network status
---------------------
    Status                 : Not available

=======================================================================
============================= SHOW SETTINGS ===========================
=======================================================================

Wireless LAN settings
---------------------
    Show blocked networks in visible network list: No

    Only use GP profiles on GP-configured networks: No

    Hosted network mode allowed in WLAN service: Yes

    Allow shared user credentials for network authentication: Yes

    Block period: Not Configured.

    Auto configuration logic is enabled on interface "Wi-Fi"
    MAC randomization not available on interface Wi-Fi

=======================================================================
============================== SHOW FILTERS ===========================
=======================================================================

Allow list on the system (group policy)
---------------------------------------
    <None>

Allow list on the system (user)
-------------------------------
    <None>

Block list on the system (group policy)
---------------------------------------
    <None>

Block list on the system (user)
-------------------------------
    <None>

=======================================================================
=========================== SHOW CREATEALLUSER ========================
=======================================================================

Everyone is allowed to create all user profiles.

=======================================================================
============================= SHOW PROFILES ===========================
=======================================================================

Profiles on interface Wi-Fi:

Group policy profiles (read only)
---------------------------------
    <None>

User profiles
-------------
    All User Profile     : bungle4
    All User Profile     : mynet

=======================================================================
========================== SHOW PROFILES NAME=* =======================
=======================================================================

Here is the bungle4 section.

Profile bungle4 on interface Wi-Fi:
=======================================================================

Applied: All User Profile

Profile information
-------------------
    Version                : 1
    Type                   : Wireless LAN
    Name                   : bungle4
    Control options        :
        Connection mode    : Connect automatically
        Network broadcast  : Connect only if this network is broadcasting
        AutoSwitch         : Do not switch to other networks
        MAC Randomization  : Disabled

Connectivity settings
---------------------
    Number of SSIDs        : 1
    SSID name              : "bungle4"
    Network type           : Infrastructure
    Radio type             : [ Any Radio Type ]
    Vendor extension          : Not present

Security settings
-----------------
    Authentication         : WPA2-Personal
    Cipher                 : CCMP
    Authentication         : WPA2-Personal
    Cipher                 : GCMP
    Security key           : Present

Cost settings
-------------
    Cost                   : Unrestricted
    Congested              : No
    Approaching Data Limit : No
    Over Data Limit        : No
    Roaming                : No
    Cost Source            : Default

And here is the rest

Profile mynet on interface Wi-Fi:
=======================================================================

Applied: All User Profile

Profile information
-------------------
    Version                : 1
    Type                   : Wireless LAN
    Name                   : mynet
    Control options        :
        Connection mode    : Connect automatically
        Network broadcast  : Connect only if this network is broadcasting
        AutoSwitch         : Do not switch to other networks
        MAC Randomization  : Disabled

Connectivity settings
---------------------
    Number of SSIDs        : 1
    SSID name              : "mynet"
    Network type           : Infrastructure
    Radio type             : [ Any Radio Type ]
    Vendor extension          : Not present

Security settings
-----------------
    Authentication         : WPA2-Personal
    Cipher                 : CCMP
    Authentication         : WPA2-Personal
    Cipher                 : GCMP
    Security key           : Present

Cost settings
-------------
    Cost                   : Unrestricted
    Congested              : No
    Approaching Data Limit : No
    Over Data Limit        : No
    Roaming                : No
    Cost Source            : Default

=======================================================================
======================= SHOW NETWORKS MODE=BSSID ======================
=======================================================================

Interface name : Wi-Fi
There are 6 networks currently visible.

SSID 1 : mynet
    Network type            : Infrastructure
    Authentication          : WPA2-Personal
    Encryption              : CCMP
    BSSID 1                 : 00:21:29:9b:55:0f
         Signal             : 99%
         Radio type         : 802.11g
         Channel            : 6
         Basic rates (Mbps) : 1 2 5.5 11
         Other rates (Mbps) : 6 9 12 18 24 36 48 54

SSID 2 : DIRECT-2A-HP OfficeJet 4650
    Network type            : Infrastructure
    Authentication          : WPA2-Personal
    Encryption              : CCMP
    BSSID 1                 : 18:60:24:35:ac:2b
         Signal             : 33%
         Radio type         : 802.11n
         Channel            : 1
         Basic rates (Mbps) : 24 39 156
         Other rates (Mbps) : 18 19.5 36 48 54

SSID 3 : SHAW-39F790
    Network type            : Infrastructure
    Authentication          : WPA2-Personal
    Encryption              : CCMP
    BSSID 1                 : 90:50:ca:39:f7:98
         Signal             : 31%
         Radio type         : 802.11n
         Channel            : 1
         Basic rates (Mbps) : 6.5 16 19.5 117
         Other rates (Mbps) : 18 19.5 24 36 39 48 54 156

SSID 4 : 2WIRE747
    Network type            : Infrastructure
    Authentication          : WPA2-Personal
    Encryption              : CCMP
    BSSID 1                 : 98:2c:be:3d:a2:49
         Signal             : 36%
         Radio type         : 802.11g
         Channel            : 4
         Basic rates (Mbps) : 1 2 5.5 11
         Other rates (Mbps) : 6 9 12 18 24 36 48 54

SSID 5 : Actiontec-0174-2.4G
    Network type            : Infrastructure
    Authentication          : WPA2-Personal
    Encryption              : CCMP
    BSSID 1                 : 10:78:5b:4e:f7:a1
         Signal             : 31%
         Radio type         : 802.11n
         Channel            : 11
         Basic rates (Mbps) : 6.5 16 19.5 24 39 117 156
         Other rates (Mbps) : 18 19.5 36 48 54

SSID 6 : JBL Playlist.d007
    Network type            : Infrastructure
    Authentication          : Open
    Encryption              : None
    BSSID 1                 : fa:8f:ca:51:66:c9
         Signal             : 30%
         Radio type         : 802.11n
         Channel            : 11
         Basic rates (Mbps) : 39
         Other rates (Mbps) : 18 19.5 24 36 48 54 156

=======================================================================
======================= SHOW INTERFACE CAPABILITIES ===================
=======================================================================

Wireless System Capabilities
----------------------------
    Number of antennas connected to the 802.11 radio (value not available)

    Max number of channels the device can operate on, simultaneously (value not available)

    Co-existence Support                        : Unknown

Wireless Device Capabilities
----------------------------

Interface name: Wi-Fi

    WDI Version (Windows)                       : 0.0.0.0

    WDI Version (IHV)                           : 0.0.0.0

    Firmware Version                            :

    Station                                     : Supported

    Soft AP                                     : Supported

    Network monitor mode                        : Supported

    Wi-Fi Direct Device                         : Supported

    Wi-Fi Direct GO                             : Supported

    Wi-Fi Direct Client                         : Supported

    Protected Management Frames                 : Supported

    DOT11k neighbor report                      : Unknown

    ANQP Service Information Discovery          : Not Supported

    Action Frame                                : Not Supported

    Diversity Antenna                           : Unknown

    IBSS                                        : Supported

    Promiscuous Mode                            : Supported

    P2P Device Discovery                        : Not Supported

    P2P Service Name Discovery                  : Not Supported

    P2P Service Info Discovery                  : Not Supported

    P2P Background Discovery                    : Not Supported

    P2P GO on 5 GHz                             : Unknown

    ASP 2.0 Service Name Discovery              : Not Supported

    ASP 2.0 Service Information Discovery       : Not Supported

    IP Docking Capable                          : Not Supported

    FIPS                                        : Supported

    Instant Connect                             : Supported

    Dx Standby NLO                              : Supported

    Extended Channel Switch Announcement        : Unknown

    Function Level Reset                        : Not Supported

    Platform Level Reset                        : Not Supported

    Bus Level Reset                             : Not Supported

    MAC Randomization                           : Not Supported

    Fast Transition                             : Not Supported

    MU-MIMO                                     : Unknown

    Miracast Sink                               : Unknown

    BSS Transition (802.11v)                    : Unknown

    IHV Extensibility Module Configured         : Supported

    Number of Tx Spatial Streams                : 0

    Number of Rx Spatial Streams                : 0

    Number of Concurrent Channels Supported     : 2

    P2P GO ports count                          : 1

    P2P Clients Port Count                      : 1

    P2P Max Mobile AP Clients                   : 10

    Max ANQP Service Advertisements Supported   : 0

    Co-existence Support                        : Unknown

D:\>

Dani AI

Generated

A few clarifying notes and practical checks that build on ’s suggestion to remove the profile and on what discovered.

Windows keeps a saved wireless profile for any SSID a machine has connected to; those profiles can persist even when the network is out of range or hidden. Profiles intended for every account show as “All User Profile” and live where the WLAN service stores them, so they aren’t just a transient UI entry. See the Microsoft netsh documentation for how profiles are handled. (https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/netsh-wlan)

Where to look and what to do next

  • The WLAN service writes each saved profile as an XML file under the system folder (ProgramData). Checking the XML file for the interface GUID and the file’s filesystem timestamps will usually tell you roughly when the profile was created. You can also export a profile to an XML file (including the PSK in cleartext if you explicitly request it) for offline inspection — protect that export if you do it. Microsoft documents both the ProgramData storage location and the export options. (https://learn.microsoft.com/en-us/intune/intune-service/configuration/wi-fi-profile-shared-key)

Practical troubleshooting steps (non-exhaustive)

  • Inspect the XML file under the Wlansvc Profiles\Interfaces folder to confirm the SSID string, encryption type and other settings; look at the file creation/modification times to correlate with device activity.
  • Check router/AP logs or device admin pages and other personal devices (phones/tablets) for that SSID name or a matching connection time. Many phones and IoT devices create temporary APs for setup — if a laptop briefly joined one, Windows would save a profile.
  • If the profile is unwanted, removing it (with admin rights) is fine; export it first if you want a record. To avoid future surprises, disable auto‑connect for unknown networks and use “Manage known networks” (Windows GUI) or the equivalent admin tools.

If deeper forensics are needed (e.g., to map the SSID to a MAC or to check last‑connected timestamps in event logs), mention that and more targeted steps can be provided.

Recommended Answers

All 4 Replies

Just tried the netsh wlan showall here and under profiles is a profile for each WiFi hotspot I have connected to.
The profile name matched exactly our hotspot SSIDs.

When I click on the wireless tool in the taskbar I see 8 hotspots including my own (mynet) . I do NOT see bungle4. And I only have netsh profiles for two: mynet and bungle4. I have no idea what bungle4 is or when it showed up. If I had to (and I really don't want to) I could restore system images all the way back to when I rebuilt my system last october and repeat the netsh query. That would be very time-consuming.

Sorry but I didn't do a deep dive into this area but can confirm I get a profile for every WiFi connection made. Now that Windows is often set to auto-connect to open hot spots, all it would take is to power up near some open hot spot.

Since it's a profile you don't use, I'd delete it and forgo the forensics.

It's deleted

netsh wlan delete profile name=bungle4

I take daily images so if anything stops working I can always go back.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.