home

controleparental.exe

Contrôle Parental

Nord Net

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Contrôle Parental NordNet’.
Publisher:
NordNet  (signed by Nord Net)

Product:
Contrôle Parental

Version:
6.3.2.0

MD5:
86777fef40b3e6a26ce1364fbb5b0f1b

SHA-1:
e7da4e4853bb6fd0eb7120f2a68e4edc24b0ff40

SHA-256:
612b6e36c9f102e27111aa5a8ba8ef1f38c2a6eecf462af46325036643ce412a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 8:52:06 PM UTC  (today)

File size:
2.6 MB (2,725,344 bytes)

Product version:
6.3.2.0

Copyright:
Copyright (C) 2013 NordNet S.A.

Original file name:
oc-gui.exe

File type:
Executable application (Win32 EXE)

Language:
French (France)

Common path:
C:\Program Files\contrôle parental nordnet\controleparental.exe

Digital Signature
Signed by:
Nord Net

Authority:
Thawte, Inc.

Valid from:
12/10/2012 1:00:00 AM

Valid to:
2/9/2014 12:59:59 AM

Subject:
CN=Nord Net, O=Nord Net, L=Hem, S=Nord, C=FR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
656F7AABEA9231AC6F1781519F0CF871

File PE Metadata
Compilation timestamp:
12/10/2013 5:16:24 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:IWsa89/ANjtGYtiMje4WTZgALhKmxD1Rr1+UHRKaGtYO8Q/3j65VJu+5N5IUd/:ZdFNhGYtvWTZgKhKmxxT+UHRKaLQL65n

Entry address:
0x172850

Entry point:
E8, 33, 93, 00, 00, E9, 89, FE, FF, FF, 3B, 0D, 30, DC, 60, 00, 75, 02, F3, C3, E9, BA, 93, 00, 00, 8B, 41, 04, 85, C0, 75, 05, B8, F8, F8, 5C, 00, C3, 8B, FF, 55, 8B, EC, 83, 7D, 08, 00, 57, 8B, F9, 74, 2D, 56, FF, 75, 08, E8, 23, 48, 00, 00, 8D, 70, 01, 56, E8, 37, 0D, 00, 00, 59, 59, 89, 47, 04, 85, C0, 74, 11, FF, 75, 08, 56, 50, E8, 80, 94, 00, 00, 83, C4, 0C, C6, 47, 08, 01, 5E, 5F, 5D, C2, 04, 00, 8B, FF, 56, 8B, F1, 80, 7E, 08, 00, 74, 09, FF, 76, 04, E8, 98, 0D, 00, 00, 59, 83, 66, 04, 00, C6, 46...
 
[+]

Code size:
1.7 MB (1,730,560 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Contrôle Parental NordNet

Command:
"C:\Program Files\contrôle parental nordnet\controleparental.exe"


Scan controleparental.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.