home

ConnectionCenter.exe

NetZero Connection Center

NetZero Inc

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘NetZeroDSL’.
Publisher:
NetZero, Inc.  (signed by NetZero Inc)

Product:
NetZero Connection Center

Version:
4.2.1.0

MD5:
6d1f6b88b704d477334b8b099fab0bd3

SHA-1:
99e254ef6a7c9d4b9bff72c7aca035c086de6cf2

SHA-256:
dfbd347a7aee1b962f2f1b31305f73ca835c550a08019bc74a012b7aef438d0f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 2:16:47 PM UTC  (today)

File size:
1.4 MB (1,484,952 bytes)

Product version:
4.2.1.0

Copyright:
Copyright © 2002-2012 United Online, Inc.

Original file name:
ConnectionCenter.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\netzero dsl\connectioncenter.exe

Digital Signature
Signed by:
NetZero Inc

Authority:
Thawte, Inc.

Valid from:
2/28/2011 6:00:00 PM

Valid to:
3/5/2013 5:59:59 PM

Subject:
CN=NetZero Inc, OU=Secure Application Development, O=NetZero Inc, L=Woodland Hills, S=California, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
7E9995DC3A2C58B26F9FFD83975F0293

File PE Metadata
Compilation timestamp:
3/1/2012 9:52:46 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
24576:6y+Jh5edjNDjJKH/TmN3XtDFbOV+1/55NOLcaA39TXxrxfx:+3ezJKH/TmN3XtDFbp/MLcaAtTXxrxZ

Entry address:
0x896D9

Entry point:
6A, 60, 68, 18, C8, 4D, 00, E8, 6F, C8, FF, FF, BF, 94, 00, 00, 00, 8B, C7, E8, BF, C9, FF, FF, 89, 65, E8, 8B, F4, 89, 3E, 56, FF, 15, C8, B0, 4C, 00, 8B, 4E, 10, 89, 0D, 00, D1, 51, 00, 8B, 46, 04, A3, 0C, D1, 51, 00, 8B, 56, 08, 89, 15, 10, D1, 51, 00, 8B, 76, 0C, 81, E6, FF, 7F, 00, 00, 89, 35, 04, D1, 51, 00, 83, F9, 02, 74, 0C, 81, CE, 00, 80, 00, 00, 89, 35, 04, D1, 51, 00, C1, E0, 08, 03, C2, A3, 08, D1, 51, 00, 33, F6, 56, 8B, 3D, 28, B1, 4C, 00, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03...
 
[+]

Entropy:
6.2715

Developed / compiled with:
Microsoft Visual C++ v7.0

Code size:
808 KB (827,392 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
NetZeroDSL

Command:
"C:\Program Files\netzero dsl\connectioncenter.exe"


Scan ConnectionCenter.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.