home

ConnectionCenter.exe

NetZero Connection Center

NetZero Inc

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘NetZeroDSL’.
Publisher:
NetZero, Inc.  (signed by NetZero Inc)

Product:
NetZero Connection Center

Version:
4.3.0.0

MD5:
d752b12a6a4f789eba575da276862e83

SHA-1:
4ef273143984e1595ab6a751f3435109ff75c159

SHA-256:
7f0249cf23b8954f86063d2130d9911255e21a7e5d0b1d1673d4c1de1d1bc86d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 9:01:13 PM UTC  (today)

File size:
1.3 MB (1,371,768 bytes)

Product version:
4.3.0.0

Copyright:
Copyright © 2002-2013 United Online, Inc.

Original file name:
ConnectionCenter.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\netzero dsl\connectioncenter.exe

Digital Signature
Signed by:
NetZero Inc

Authority:
Thawte, Inc.

Valid from:
3/4/2013 7:00:00 PM

Valid to:
3/5/2015 6:59:59 PM

Subject:
CN=NetZero Inc, OU=Secure Application Development, O=NetZero Inc, L=Woodland Hills, S=California, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
1F2FABC5181CBE85B7D586465EA3A73A

File PE Metadata
Compilation timestamp:
11/1/2013 4:33:35 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:MZB3gxULUTUSdDOxUaXqF83jZ/1J9TWYYC:MLWtbEUaXD3jF1fTWYYC

Entry address:
0x66741

Entry point:
E8, 53, E1, 00, 00, E9, 78, FE, FF, FF, CC, CC, CC, CC, CC, 55, 8B, EC, 57, 8B, 7D, 08, 33, C0, 83, C9, FF, F2, AE, 83, C1, 01, F7, D9, 83, EF, 01, 8A, 45, 0C, FD, F2, AE, 83, C7, 01, 38, 07, 74, 04, 33, C0, EB, 02, 8B, C7, FC, 5F, C9, C3, 8B, FF, 55, 8B, EC, 83, EC, 10, 53, 56, FF, 75, 10, 8D, 4D, F0, E8, 0F, BB, FF, FF, 8B, 75, F4, 33, DB, 39, 5E, 08, 75, 12, FF, 75, 0C, FF, 75, 08, E8, 89, E1, 00, 00, 59, 59, E9, 8C, 00, 00, 00, 8B, 4D, 08, 3B, CB, 75, 28, E8, 72, EB, FF, FF, 53, 53, 53, 53, 53, C7, 00...
 
[+]

Entropy:
6.2591

Code size:
721 KB (738,304 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
NetZeroDSL

Command:
"C:\Program Files\netzero dsl\connectioncenter.exe"


Scan ConnectionCenter.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.