home

CLUPConsole.exe

Client Update

Volvo Information Technology AB

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Client Update’.
Publisher:
Volvo Information Technology AB  (signed and verified)

Product:
Client Update

Description:
Client Update Console

Version:
2.3.31.0

MD5:
9e082dff9cd292e2ad2745da5b968580

SHA-1:
34e84cd3357d759f1f65a3503472d8c1432bbcd3

SHA-256:
497ead9ff0112ec404539f685d29169b57b7d80fefb4343528b893b3a81d961d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 5:54:51 PM UTC  (today)

File size:
415.3 KB (425,312 bytes)

Product version:
2.3.31.0

Copyright:
Copyright © Volvo Information Technology AB 2016

Original file name:
CLUPConsole.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\client update\console\clupconsole.exe

Digital Signature
Signed by:
Volvo Information Technology AB

Authority:
Symantec Corporation

Valid from:
8/26/2015 7:00:00 PM

Valid to:
8/27/2018 6:59:59 PM

Subject:
CN=Volvo Information Technology AB, OU=Corporate Process & IT, O=Volvo Information Technology AB, L=Gothenburg, S=VASTRA GOTALAND, C=SE

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
2ACF22ACD3647FA2CF330D7753B8E201

File PE Metadata
Compilation timestamp:
11/29/2016 5:01:35 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:MjXNXXjefCmRw/bLFTmE0ewnivAVIDOEjxBEhQx1udNNIJ+WKdBZd/9B2e:MjXNXXje6m29A

Entry address:
0x6581E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.9350

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
398.5 KB (408,064 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Client Update

Command:
C:\Program Files\client update\console\clupconsole.exe \hide


Scan CLUPConsole.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.