home

nhopen.dll

nhopen.dll

Gaia Media Group Inc.

This file is installed with the program InternetSafeZone.
Publisher:
Gaia Media Group Inc.  (signed and verified)

Product:
nhopen.dll

Version:
2013.3.11.12

MD5:
78b2d280b2a9f911a9d88c1777d75c49

SHA-1:
1b2cf0c82a7c265c8d0bee2173d80378bdc97ac9

SHA-256:
4b4a95ed076cba3b8c8588e704f93569e5e154cc91bb773d0c0e6d4e943d087c

Scanner detections:
2 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/26/2024 4:19:29 AM UTC  (today)

Scan engine
Detection
Engine version

Malwarebytes
Adware.Korad
v2014.09.30.10

nProtect
Adware/W32.KrAdword.1410120
13.11.17.01

File size:
1.3 MB (1,410,120 bytes)

Product version:
2013.3.11.12

Copyright:
nhopen

Original file name:
nhopen.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\iszone\nhopen.dll

Digital Signature
Signed by:
Gaia Media Group Inc.

Authority:
Thawte, Inc.

Valid from:
11/8/2012 9:00:00 AM

Valid to:
11/9/2013 8:59:59 AM

Subject:
CN=Gaia Media Group Inc., OU=Internet Dept, O=Gaia Media Group Inc., L=Gangseo-gu, S=SEOUL, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
2290AFA8D7BCD34872ABFC6240F731F6

File PE Metadata
Compilation timestamp:
3/12/2013 1:33:28 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:f/sXLRRBeaWDeRACj0lNfdUxWJBUS99hL01aOpQ/Ui7pcSbAPbgyBLnPcS:fUNNWommxWJ2S3hL0Isi7piPbgG0S

Entry address:
0x12E1F8

Entry point:
55, 8B, EC, 83, C4, C0, B8, 24, 5D, 52, 00, E8, 40, C8, ED, FF, E8, 87, E8, FE, FF, E8, 62, 87, ED, FF, 8B, C0, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.5710

Developed / compiled with:
Microsoft Visual C++

Code size:
1.2 MB (1,233,408 bytes)

The file nhopen.dll has been discovered within the following program.

InternetSafeZone  by Gaia Media Group
InternetSafeZone is a potentially unwanted web browser extension that is ad-supported and will display various popup and banner ads as well as modify the user's web browser search and home page settings.
58% remove it
 
Powered by Should I Remove It?

Scan nhopen.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.