ClientIP.exe

ClientIP.exe

Consulters

It runs as a windows Service named “Client ConAudit”.
Publisher:
Consulters

Product:
ClientIP.exe

Description:
ConAudit (ip) (28/12/2008)

Version:
2.04.0003

MD5:
0a54ff7bcb7bd6dbe5c761842f4f2a09

SHA-1:
38351226873abc71090ffaf89af34a3f75244624

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/28/2024 9:10:09 PM UTC  (today)

Scan engine
Detection
Engine version

F-Prot
W32/VB-Backdoor-PEK-based!Maxim
4.6.5.141

File size:
424 KB (434,176 bytes)

Product version:
2.04.0003

Copyright:
Copyright (c) 2000-2010

Trademarks:
Consulters

Original file name:
ClientIP.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Windows\System32\clientip.exe

File PE Metadata
Compilation timestamp:
12/28/2009 2:54:53 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0x485C

Entry point:
68, 7C, 74, 40, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 58, 00, 00, 00, 40, 00, 00, 00, BA, CE, 69, F1, 44, 61, 7C, 47, 93, 68, 81, 4C, 00, 8B, 1E, 2D, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 30, 30, 30, 30, 30, 30, 43, 6C, 69, 65, 6E, 74, 49, 50, 00, 2E, 30, 23, 30, 3B, 20, 44, 65, 2D, 46, 61, 73, 74, 20, 41, 75, 64, 69, 74, 20, 43, 6C, 69, 65, 6E, 74, 00, 7B, 33, 39, 46, 00, 00, 00, 00, FF, CC, 31, 00, 1A, E7, 06, 23, 22, C8, 70, 5D, 42, 88, 47, 96, AB, D5, F6, 01, 4D, DB, B8, A9...
 
[+]

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
412 KB (421,888 bytes)

Service
Display name:
Client ConAudit

Service name:
Teste

Type:
Win32OwnProcess, InteractiveProcess


Scan ClientIP.exe - Powered by Reason Core Security