clrver.exe

File Path: C:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools\x64\clrver.exe
Description: Displays CLR Versions
Comments: Flavor=Retail

Hashes

Type	Hash
MD5	`C2915E5A90FEF1FBD138A57DA64F331C`
SHA1	`1CF7E2F27AFA5BB88AE96DA1E66584F701E1791C`
SHA256	`50FBE4A2A190FDBF15FDC7DF00180D5C08726A7F89A1252ED9F556EE2DE1061F`
SHA384	`70127619CBFE99D3CC70FE70FF937EE3DB03465475D766E34893909C7404BF44A7EC4AF628779D486AD249769FE54637`
SHA512	`D595B1CA98ED151CF6216D2BF34217AC307DF21B2B12699BC2F78B5DD4D573CBC3C7EB74BBE566EA09F520970FD3BF70C71D3FC747B4D66956857C492C7AB424`
SSDEEP	`3072:tVsNBuwPmVx0rxQdDDhJAFCUgSzGc6txvg1VxZSz:tVdw+f0SD1JZUdiZ8k`
IMP	`DD8FC794E50A831220028F4281C4E156`
PESHA1	`F19940E010FC32E929187C1EF19CBEA46AE07CB7`
PE256	`90322F98378689C1B68D71C2AC4B2E69FF441AD0AA069935AD4ED7A941852117`

Runtime Data

Usage (stdout):

Microsoft (R) .NET CLR Version Tool  Version 4.8.4084.0
Copyright (c) Microsoft Corporation.  All rights reserved.

Unknown option "--help".
Displays CLR versions
Usage: clrver [-?|-all|<PID>]

	-all   - Displays all processes on the machine using the CLR.
	<PID> - Displays the version of the CLR used by the specified process.
	-?    - Displays this help screen.

If called with no options, clrver will display all installed CLR versions.

Child Processes:

Fondue.exe

Loaded Modules:

Path
C:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools\x64\clrver.exe
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll

Signature

Status: Signature verified.
Serial: 33000001519E8D8F4071A30E41000000000151
Thumbprint: 62009AAABDAE749FD47D19150958329BF6FF4B34
Issuer: CN=Microsoft Code Signing PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: clrver.exe
Product Name: Microsoft .NET Framework
Company Name: Microsoft Corporation
File Version: 4.8.4084.0 built by: NET48REL1
Product Version: 4.8.4084.0
Language: English (United States)
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/73
VirusTotal Link: https://www.virustotal.com/gui/file/50fbe4a2a190fdbf15fdc7df00180d5c08726a7f89a1252ed9f556ee2de1061f/detection