» clmrdsvr.exe
Overview
Analysis
File Details
Behaviors (1)

clmrdsvr.exe

Client License Manager

Leica Geosystems

It runs as a separate (within the context of its own process) windows Service named “CLM Remote Daemon (svr)”.

File name:

clmrdsvr.exe

Publisher:

Leica Geosystems AG (signed by Leica Geosystems)

Product:

Client License Manager

Description:

CLM Remote Daemon

Version:

1.2.1001.3

MD5:

11096f165eacd830357dad035ea0d3f0

SHA-1:

4dc122519b5473d2a6d53f500378ab5a971eff41

SHA-256:

6e9bf919f4acbb244e53741d0d48b036da8e620341a1fd2033f2c20edcde5a65

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 10:32:50 AM UTC (today)

File size:

3.3 MB (3,506,840 bytes)

Product version:

1.2.1001.3

Original file name:

clmrd.exe/clmrdsvr.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\common files\leica geosystems\clm-remote-daemon-svr\clmrdsvr.exe

Digital Signature

Signed by:

Leica Geosystems

Authority:

VeriSign, Inc.

Valid from:

3/7/2011 12:00:00 AM

Valid to:

3/8/2014 11:59:59 PM

Subject:

CN=Leica Geosystems, OU=Geomatics, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Leica Geosystems, L=Heerbrugg, S=St.Gallen, C=CH

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3FE094C94EB8A2FDC66149717B23C786

File PE Metadata

Compilation timestamp:

8/24/2012 6:06:55 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

9.0

.NET CLR dependent:

Yes

CTPH (ssdeep):

49152:zpno1tuLyOmiT+f75fKxrKFiwl58yrceT6CQFiTo0VHqXCL:dno1t2B9TqpTVvB

Entry address:

0x1AAFF2

Entry point:

FF, 25, 94, C7, 67, 00, CC, CC, CC, CC, CC, CC, CC, CC, 8D, 4D, C8, E9, A8, E7, E7, FF, 8D, 4D, C4, E9, A0, CE, E6, FF, 8B, 54, 24, 08, 8D, 42, 0C, 8B, 4A, B4, 33, C8, E8, 3F, B5, F3, FF, 8B, 4A, F4, 33, C8, E8, 35, B5, F3, FF, B8, 10, 43, 70, 00, E9, 25, B5, F3, FF, 8D, 4D, C8, E9, 73, E7, E7, FF, 8D, 4D, A8, E9, 6B, E7, E7, FF, 8D, 4D, A4, E9, 63, CE, E6, FF, 8B, 54, 24, 08, 8D, 42, 0C, 8B, 4A, 90, 33, C8, E8, 02, B5, F3, FF, 8B, 4A, F4, 33, C8, E8, F8, B4, F3, FF, B8, 4C, 43, 70, 00, E9, E8, B4, F3, FF... 
[+]

Entropy:

6.4011

Code size:

2.5 MB (2,598,912 bytes)

Service

Display name:

CLM Remote Daemon (svr)

Service name:

lgs-clmrdsvr

Description:

This service performs the remote daemon server functions on behalf of Leica Geosystems Client License manager (CLM)

Type:

Win32OwnProcess

Scan clmrdsvr.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.