home

nhopen.dll

nhopen.dll

Gaia Media Group Inc.

This file is installed with the program InternetSafeZone.
Publisher:
Gaia Media Group Inc.  (signed and verified)

Product:
nhopen.dll

Version:
2013.3.11.12

MD5:
cd261887c23de2c24d0775e36b961727

SHA-1:
1d1e01a24b6838c8ee175cd4ffe698407bed504d

SHA-256:
d7195b26420a1409a8d021380132b02bba2c5a31dfea475bd1d72b84b779a7b8

Scanner detections:
2 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/25/2024 2:03:54 PM UTC  (today)

Scan engine
Detection
Engine version

AhnLab V3 Security
PUP/Win32.Helper
2014.11.06

Malwarebytes
Adware.Korad
v2014.11.08.08

File size:
1.3 MB (1,410,120 bytes)

Product version:
2013.3.11.12

Copyright:
nhopen

Original file name:
nhopen.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\malwares\iszone\nhopen.dll

Digital Signature
Signed by:
Gaia Media Group Inc.

Authority:
Thawte, Inc.

Valid from:
11/8/2012 1:00:00 AM

Valid to:
11/9/2013 12:59:59 AM

Subject:
CN=Gaia Media Group Inc., OU=Internet Dept, O=Gaia Media Group Inc., L=Gangseo-gu, S=SEOUL, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
2290AFA8D7BCD34872ABFC6240F731F6

File PE Metadata
Compilation timestamp:
3/12/2013 5:33:28 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:u/sXLRRBeaWDeRACj0lNfdUxWJBUS99hL01aOpQ/Ui7pcSbAPbgyBLnPcr:uUNNWommxWJ2S3hL0Isi7piPbgG0r

Entry address:
0x12E1F8

Entry point:
55, 8B, EC, 83, C4, C0, B8, 24, 5D, 52, 00, E8, 40, C8, ED, FF, E8, 87, E8, FE, FF, E8, 62, 87, ED, FF, 8B, C0, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
1.2 MB (1,233,408 bytes)

The file nhopen.dll has been discovered within the following program.

InternetSafeZone  by Gaia Media Group
InternetSafeZone is a potentially unwanted web browser extension that is ad-supported and will display various popup and banner ads as well as modify the user's web browser search and home page settings.
58% remove it
 
Powered by Should I Remove It?

Scan nhopen.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.