» wddmstatus.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

wddmstatus.exe

WDDMStatus.exe

Western Digital Technologies, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘WD Quick View’. This is installed with WD Quick View.

File name:

wddmstatus.exe

Publisher:

Western Digital Technologies, Inc. (signed and verified)

Product:

WDDMStatus.exe

Description:

WD Quick View

Version:

3.2.0.15

MD5:

31e3cdeabd9f89aed78c08a391d6a7d2

SHA-1:

6fad96e08ac3db1141a4cbdb5f103ec834644f7e

SHA-256:

cde7393a6f43ec0741087602d5bc2a00bc93cae54b79c81c3498b64ad1776064

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/26/2024 4:42:44 AM UTC (today)

File size:

5.3 MB (5,537,136 bytes)

Product version:

3.2.0.15

Original file name:

WDBtnMgrUI.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\western digital\wd quick view\wddmstatus.exe

Digital Signature

Signed by:

Western Digital Technologies, Inc.

Authority:

VeriSign, Inc.

Valid from:

7/7/2013 8:00:00 PM

Valid to:

10/6/2016 7:59:59 PM

Subject:

CN="Western Digital Technologies, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Western Digital Technologies, Inc.", L=Irvine, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

01F6A377658FFAD1EADE20C870F69F67

File PE Metadata

Compilation timestamp:

8/14/2013 10:59:31 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

98304:2DQJr1q2thFfkbLUCFZKNqZmMPeC8A4SJw0XPEk:w9IC2iteC8A4iw0X

Entry address:

0x13244B

Entry point:

E8, 8C, 89, 00, 00, E9, 89, FE, FF, FF, 3B, 0D, 80, 9B, 5B, 00, 75, 02, F3, C3, E9, 13, 8A, 00, 00, 8B, FF, 55, 8B, EC, 8B, 45, 08, 66, 8B, 55, 0C, EB, 08, 66, 3B, CA, 74, 12, 83, C0, 02, 0F, B7, 08, 66, 85, C9, 75, F0, 66, 39, 10, 74, 02, 33, C0, 5D, C3, 8B, FF, 55, 8B, EC, 8B, 45, 14, 56, 85, C0, 74, 41, 83, 7D, 08, 00, 75, 13, E8, 30, 35, 00, 00, 6A, 16, 5E, 89, 30, E8, BE, 8F, 00, 00, 8B, C6, EB, 2A, 83, 7D, 10, 00, 74, E7, 39, 45, 0C, 73, 0E, E8, 12, 35, 00, 00, 6A, 22, 59, 89, 08, 8B, F1, EB, DE, 50... 
[+]

Entropy:

4.7640

Code size:

1.4 MB (1,434,624 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

WD Quick View

Command:

C:\Program Files\western digital\wd quick view\wddmstatus.exe

The file wddmstatus.exe has been discovered within the following programs.

WD Quick View by Western Digital Technologies, Inc.

This is a utility that will discover WD network attached storage drives on the network and provide drive status information.

support.wdc.com

6% remove it

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.