home

Fdt.ClrExtension.Clr4Surrogate.exe

M&M Software GmbH

Publisher:
M&M Software GmbH  (signed and verified)

Description:
FDT2 Surrogate Process for CLR4 x86

Version:
3.3.16165.2

MD5:
86db420aa412e36d4055ab9b54bd9db2

SHA-1:
500ed6446d0ea5b16115a57b6120a4a82b677a46

SHA-256:
a85215284fcb5f70e3fbf003b630f5265803b2bc55a3aa81f097c2f9612da836

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/4/2025 12:29:40 AM UTC  (today)

File size:
285.3 KB (292,192 bytes)

Product version:
3.3.16165.2

Copyright:
Copyright © M&M Software GmbH. All rights reserved.

Original file name:
Fdt.ClrExtension.Clr4Surrogate.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\pactware\fdt.clrextension.clr4surrogate.exe

Digital Signature
Signed by:
M&M Software GmbH

Authority:
thawte, Inc.

Valid from:
4/7/2016 2:00:00 AM

Valid to:
4/8/2018 1:59:59 AM

Subject:
CN=M&M Software GmbH, O=M&M Software GmbH, L=St. Georgen, S=Baden-Wuerttemberg, C=DE

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
546A4B4A8D46BD0BAF36E004F046DB42

File PE Metadata
Compilation timestamp:
6/13/2016 12:50:19 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:OGpdnz+tkaFIm2mntV+CElZRWnbEcu/RlSjJJV1easzg8yrrQaWtWSC2AU5/iFy:Lzq7+7RKrcLIkWOk

Entry address:
0x473EE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 02, 00, 10, 00, 00, 00, 20, 00, 00, 80, 18, 00, 00, 00, 38, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 01, 00, 00, 00, 50, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 01, 00, 00, 00, 68, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
277 KB (283,648 bytes)

Scan Fdt.ClrExtension.Clr4Surrogate.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.