AutoUpdate.exe

LOLRMM lists a file named AutoUpdate.exe as Freshservice’s. Freshservice is a SaaS IT Service Management (ITSM) platform from Freshworks Inc.

From LOLRMM (Apache 2.0), which lists the remote management tools intruders are known to use as well as administrators. It goes by the file’s name: a copy that is the file above is not necessarily Freshservice’s.

3 known copies

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.