home

gamedrvr.exe

WildTangent Game Loader

Wildtangent Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘WildTangent CDA’.
Publisher:
WildTangent, Inc.  (signed by Wildtangent Inc.)

Product:
WildTangent Game Loader

Description:
WildTangent Automatic Update Manager

Version:
5.0.0.190

MD5:
131884a34116cf0d3e5d47ae0e606883

SHA-1:
d94293f783121102931a5f29b91e777b96d423c7

SHA-256:
5bec323ffde4007619087225ddf3bb1f7dcc151f5d9021d91ac063f99787a5c0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 12:54:13 PM UTC  (today)

File size:
27.9 KB (28,616 bytes)

Product version:
5.0.0.190

Copyright:
All Rights Reserved © 2003-2004 WildTangent, Inc.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\wildtangent\apps\cda\gamedrvr.exe

Digital Signature
Signed by:
Wildtangent Inc.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
2/27/2004 9:52:15 PM

Valid to:
2/26/2006 9:52:15 PM

Subject:
CN=Wildtangent Inc., OU=Engineering, O=Wildtangent Inc., L=Redmond, S=Washington, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
3DDAB2

File PE Metadata
Compilation timestamp:
3/29/2005 7:24:15 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
768:dnY9Diyi42UWTamfC/TlpiC2PHGD976y/Im4xnoL3S:dCSEppGegxnoG

Entry address:
0x1267

Entry point:
55, 8B, EC, 6A, FF, 68, 78, 20, 40, 00, 68, E8, 13, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, 38, 20, 40, 00, 59, 83, 0D, 34, 30, 40, 00, FF, 83, 0D, 38, 30, 40, 00, FF, FF, 15, 5C, 20, 40, 00, 8B, 0D, 30, 30, 40, 00, 89, 08, FF, 15, 30, 20, 40, 00, 8B, 0D, 2C, 30, 40, 00, 89, 08, A1, 2C, 20, 40, 00, 8B, 00, A3, 3C, 30, 40, 00, E8, 11, 01, 00, 00, 39, 1D, 20, 30, 40, 00, 75, 0C, 68, E4, 13, 40, 00, FF, 15, 28, 20...
 
[+]

Entropy:
6.0628

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
1.5 KB (1,536 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
WildTangent CDA

Command:
"C:\Program Files\wildtangent\apps\cda\gamedrvr.exe" \startup "C:\Program Files\wildtangent\apps\cda\cdaengine0500.dll"


Scan gamedrvr.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.