home

controleparental.exe

Contrôle Parental

france telecom

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Contrôle Parental Orange’. This is installed with Contrôle Parental Orange.
Publisher:
NordNet  (signed by france telecom)

Product:
Contrôle Parental

Version:
6.3.2.0

MD5:
8f27e3736f7d4d8181c3e4d99ee039fe

SHA-1:
c9c137453eb11cf373036ec651c949a5441a748d

SHA-256:
1fce025feb8238ed689b345d71d56dbd0c168112d85c3f5b3d3168a5e678628a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 9:55:34 AM UTC  (today)

File size:
2.6 MB (2,726,192 bytes)

Product version:
6.3.2.0

Copyright:
Copyright (C) 2013 NordNet S.A.

Original file name:
oc-gui.exe

File type:
Executable application (Win32 EXE)

Language:
French (France)

Common path:
C:\Program Files\contrôle parental orange\controleparental.exe

Digital Signature
Signed by:
france telecom

Authority:
VeriSign, Inc.

Valid from:
9/13/2013 2:00:00 AM

Valid to:
10/15/2014 1:59:59 AM

Subject:
CN=france telecom, OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=Orange France, O=france telecom, L=Hem, S=Nord, C=FR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6B5C227D47492233B6A95D0162FF4176

File PE Metadata
Compilation timestamp:
10/15/2013 5:42:59 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:qkM90vbfb4gOWxqum1PmeSq3+flP9HymemqY2PIf6mCX0Z7v4psah7b2Z7:Ksbz4gOx1PmS3+fl5ymemqY25mq0Z7vT

Entry address:
0x17284E

Entry point:
E8, 35, 93, 00, 00, E9, 89, FE, FF, FF, 3B, 0D, 30, DC, 60, 00, 75, 02, F3, C3, E9, BC, 93, 00, 00, 8B, 41, 04, 85, C0, 75, 05, B8, F8, F8, 5C, 00, C3, 8B, FF, 55, 8B, EC, 83, 7D, 08, 00, 57, 8B, F9, 74, 2D, 56, FF, 75, 08, E8, 25, 48, 00, 00, 8D, 70, 01, 56, E8, 39, 0D, 00, 00, 59, 59, 89, 47, 04, 85, C0, 74, 11, FF, 75, 08, 56, 50, E8, 82, 94, 00, 00, 83, C4, 0C, C6, 47, 08, 01, 5E, 5F, 5D, C2, 04, 00, 8B, FF, 56, 8B, F1, 80, 7E, 08, 00, 74, 09, FF, 76, 04, E8, 9A, 0D, 00, 00, 59, 83, 66, 04, 00, C6, 46...
 
[+]

Code size:
1.7 MB (1,730,560 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Contrôle Parental Orange

Command:
"C:\Program Files\contrôle parental orange\controleparental.exe"


The file controleparental.exe has been discovered within the following program.

Contrôle Parental Orange  by NordNet
About 2% of users remove it
 
Powered by Should I Remove It?

Scan controleparental.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.