» wddmstatus.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

wddmstatus.exe

WDDMStatus.exe

Western Digital Technologies, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘WD Quick View’. This is installed with WD Quick View.

File name:

wddmstatus.exe

Publisher:

Western Digital Technologies, Inc. (signed and verified)

Product:

WDDMStatus.exe

Description:

WD Quick View

Version:

3.2.0.15

MD5:

bda41c421919cdc63e15dd9b64597656

SHA-1:

5a01b29576ffc3a0e28e4822c25157e9da5168f0

SHA-256:

29d1c19b94cf8f779949788aaa1b7da89c1d34dec53b6c817b7157afd2cef5bc

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/23/2024 5:20:45 PM UTC (today)

File size:

5.3 MB (5,537,136 bytes)

Product version:

3.2.0.15

Original file name:

WDBtnMgrUI.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\western digital\wd quick view\wddmstatus.exe

Digital Signature

Signed by:

Western Digital Technologies, Inc.

Authority:

VeriSign, Inc.

Valid from:

7/7/2013 7:00:00 PM

Valid to:

10/6/2016 6:59:59 PM

Subject:

CN="Western Digital Technologies, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Western Digital Technologies, Inc.", L=Irvine, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

01F6A377658FFAD1EADE20C870F69F67

File PE Metadata

Compilation timestamp:

11/2/2013 4:56:27 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

98304:Plz/OcS/LaXTCypDrLWLyIz6WsQ2BhE58/USJw0XPEk:tiEDrflWKE58/Uiw0X

Entry address:

0x132441

Entry point:

E8, 86, 89, 00, 00, E9, 89, FE, FF, FF, 3B, 0D, 80, 9B, 5B, 00, 75, 02, F3, C3, E9, 0D, 8A, 00, 00, 8B, FF, 55, 8B, EC, 8B, 45, 08, 66, 8B, 55, 0C, EB, 08, 66, 3B, CA, 74, 12, 83, C0, 02, 0F, B7, 08, 66, 85, C9, 75, F0, 66, 39, 10, 74, 02, 33, C0, 5D, C3, 8B, FF, 55, 8B, EC, 8B, 45, 14, 56, 85, C0, 74, 41, 83, 7D, 08, 00, 75, 13, E8, 2A, 35, 00, 00, 6A, 16, 5E, 89, 30, E8, B8, 8F, 00, 00, 8B, C6, EB, 2A, 83, 7D, 10, 00, 74, E7, 39, 45, 0C, 73, 0E, E8, 0C, 35, 00, 00, 6A, 22, 59, 89, 08, 8B, F1, EB, DE, 50... 
[+]

Entropy:

4.7647

Code size:

1.4 MB (1,434,624 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

WD Quick View

Command:

C:\Program Files\western digital\wd quick view\wddmstatus.exe

The file wddmstatus.exe has been discovered within the following programs.

WD Quick View by Western Digital Technologies, Inc.

This is a utility that will discover WD network attached storage drives on the network and provide drive status information.

support.wdc.com

6% remove it

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.