home

CLUPConsole.exe

Client Update

Volvo Information Technology AB

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Client Update’.
Publisher:
Volvo Information Technology AB  (signed and verified)

Product:
Client Update

Description:
Client Update Console

Version:
2.3.29.0

MD5:
3a4a0794cbcbb4c55fbd7fe4a3831e0c

SHA-1:
d4e592b324cf3674a2e7112aee2fc816e89a53cb

SHA-256:
a813d9f6c7f2bf953214cf134b19a9d088bd29871691bf3e90686fa36dd17397

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 5:38:57 PM UTC  (today)

File size:
414.3 KB (424,288 bytes)

Product version:
2.3.29.0

Copyright:
Copyright © Volvo Information Technology AB 2016

Original file name:
CLUPConsole.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\client update\console\clupconsole.exe

Digital Signature
Signed by:
Volvo Information Technology AB

Authority:
Symantec Corporation

Valid from:
8/26/2015 8:00:00 PM

Valid to:
8/27/2018 7:59:59 PM

Subject:
CN=Volvo Information Technology AB, OU=Corporate Process & IT, O=Volvo Information Technology AB, L=Gothenburg, S=VASTRA GOTALAND, C=SE

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
2ACF22ACD3647FA2CF330D7753B8E201

File PE Metadata
Compilation timestamp:
9/9/2016 4:37:55 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:tjXNXXsef8m6r/bLe0ewnivAVIDOEjxBEhQx1udNNIJ+WKdBZd/9B1s:tjXNXXseEmcc

Entry address:
0x654CE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.9358

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
397.5 KB (407,040 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Client Update

Command:
C:\Program Files\client update\console\clupconsole.exe \hide


Scan CLUPConsole.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.