home

wdsmanpro.exe

Cherished Technology Limited

The application wdsmanpro.exe by Cherished Technology Limited has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Cherished Technology Limited  (signed and verified)

MD5:
2ecc7951da56e4a3c76529efbad69caf

SHA-1:
ac4bae8a37b91c784468f013dff46cdf3fec6d8c

SHA-256:
eeac95fe11fda07c8bd6d98e6c61aea7e7f199775eaae5264e8076523686337f

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/27/2024 4:24:47 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
16.11.16.2

File size:
432.1 KB (442,504 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\ProgramData\lwdsmanprol\wdsmanpro.exe

Digital Signature
Signed by:
Cherished Technology Limited

Authority:
GlobalSign nv-sa

Valid from:
9/8/2015 10:18:38 AM

Valid to:
10/21/2015 5:35:29 AM

Subject:
CN=Cherished Technology Limited, O=Cherished Technology Limited, L=香港, S=香港, C=HK

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121DEEBE987EB606DF47A7FAB18750B2710

File PE Metadata
Compilation timestamp:
9/22/2015 10:25:27 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
6144:EpyK9mPkXlnowS7lmkCArCp3jFC11wtNXw:IyK9yk1j6ckWIvwtpw

Entry address:
0x157DC

Entry point:
61, 72, 61, 61, 74, 20, 77, 61, 61, 72, 6D, 65, 65, 20, 6D, 65, 65, 72, 64, 65, 72, 65, 20, 61, 70, 70, 61, 72, 61, 74, 65, 6E, 20, 76, 69, 61, 20, C3, A9, C3, A9, 6E, 20, 53, 41, 54, 41, 2D, 6C, 69, 6A, 6E, 20, 6B, 75, 6E, 6E, 65, 6E, 20, 63, 6F, 6D, 6D, 75, 6E, 69, 63, 65, 72, 65, 6E, 20, 6F, 70, 20, 65, 65, 6E, 20, 6D, 61, 6E, 69, 65, 72, 20, 64, 69, 65, 20, 76, 65, 72, 67, 65, 6C, 69, 6A, 6B, 62, 61, 61, 72, 20, 69, 73, 20, 6D, 65, 74, 20, 64, 69, 65, 20, 76, 61, 6E, 20, 65, 65, 6E, 20, 55, 53, 42, 2D...
 
[+]

Code size:
275.5 KB (282,112 bytes)

Remove wdsmanpro.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.