home

CDASrv.exe

Common Desktop Agent

Samsung Electronics CO., LTD.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘CDAServer’.
Publisher:
Samsung Electronics CO., LTD.  (signed and verified)

Product:
Common Desktop Agent

Description:
CDA Server

Version:
1.62.0.0

MD5:
b1964e8776fd7633f149788f5b2a71cb

SHA-1:
42ba050d8233e07ab35038b341c5bbf3dda57631

SHA-256:
e30ac137b9dc2d3456499e0bb3b1955d2e0f7ffdb11e7a290a9da25c76f4faf8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/7/2026 7:57:05 PM UTC  (today)

File size:
451.9 KB (462,712 bytes)

Product version:
1.62.0.0

Copyright:
Copyright © 2010. All rights reserved.

Original file name:
CDASrv.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\common files\common desktop agent\cdasrv.exe

Digital Signature
Signed by:
Samsung Electronics CO., LTD.

Authority:
VeriSign, Inc.

Valid from:
12/5/2010 7:00:00 PM

Valid to:
12/21/2013 6:59:59 PM

Subject:
CN="Samsung Electronics CO., LTD.", OU=Computer System, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Samsung Electronics CO., LTD.", L=Suwon, S=Kyungki-Do, C=KR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
02DE9572414317531C3A3D52989EB11C

File PE Metadata
Compilation timestamp:
2/20/2012 8:23:32 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:w7ewhWAdamFCnck5AEwXenYRY6OY6s7IFhqslaSw6iWO92:w7nFAm4nck5AEAnahYrZs8P6iWa2

Entry address:
0x39E6C

Entry point:
48, 83, EC, 28, E8, 8B, 50, 00, 00, 48, 83, C4, 28, E9, 16, FE, FF, FF, CC, CC, EB, 07, 3A, C2, 74, 0D, 48, FF, C1, 8A, 01, 84, C0, 75, F3, 3A, C2, 75, 04, 48, 8B, C1, C3, 33, C0, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 4C, 8B, D9, 4D, 0B, C0, 74, 24, 48, 2B, CA, F6, C2, 07, 74, 28, 8A, 02, 84, C0, 88, 04, 11, 0F, 84, E3, 00, 00, 00, 48, FF, C2, 49, FF, C8, 74, 07, F6, C2, 07, 75, E6, EB, 0C, 49, 8B, C3, C3, 48, 89, 04, 11, 48, 83, C2, 08, 48, 8B, 02, 49...
 
[+]

Entropy:
6.2080

Code size:
296.5 KB (303,616 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
CDAServer

Command:
C:\Program Files\common files\common desktop agent\cdasrv.exe


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.