home

nznotify.dll

nznotify

NetZone Info-Tech Co., Ltd., Shanghai

The module nznotify.dll by NetZone Info-Tech Co.,, Shanghai has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
NETZONE Corp.  (signed by NetZone Info-Tech Co., Ltd., Shanghai)

Product:
nznotify

Version:
8.2.0.3285

MD5:
64017f60f7f601a294bc41e06489fbdd

SHA-1:
9f18312d631e8662225a2521f8c6fe1f746a71d5

SHA-256:
fe4d1a9b96ffecd819574971644341f1c943560a9690f89138043d5c1a77b2b9

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/27/2024 5:36:29 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Optional.NetZoneI
17.2.22.11

File size:
769 KB (787,448 bytes)

Product version:
8.2.0.3285

Copyright:
Copyright (C) NETZONE Corp. 2008-2009

Original file name:
nznotify

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\windows\syswow64\nznotify.dll

Digital Signature
Signed by:
NetZone Info-Tech Co., Ltd., Shanghai

Authority:
VeriSign, Inc.

Valid from:
10/28/2016 7:00:00 AM

Valid to:
12/28/2017 6:59:59 AM

Subject:
CN="NetZone Info-Tech Co., Ltd., Shanghai", OU=研发部, O="NetZone Info-Tech Co., Ltd., Shanghai", L=Shanghai, S=Shanghai, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2BC2913D9BD8223EF5D1C130DAFC0664

File PE Metadata
Compilation timestamp:
6/20/1992 5:22:17 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

Entry address:
0x1A9EF5

Entry point:
9C, 9C, 9C, 60, C7, 44, 24, 28, 74, B6, 40, BC, E9, 7A, 2A, FC, FF, A6, 38, 7B, E7, 11, A7, 7B, A6, 49, 74, 53, 6F, 49, 74, F8, 1D, 7C, 4C, 53, 72, 69, 88, 2A, 92, F8, 88, 13, 09, BB, E3, 39, CD, 11, 0A, 13, 3D, 78, 26, 4B, 1C, 0E, D8, BC, C4, D7, EE, EF, A3, CD, ED, E3, DE, 99, 26, 9B, 23, 8E, 54, 03, 0F, B4, 1F, 8C, 38, F0, D3, 2B, BA, DE, C5, F5, 2B, EA, 61, 7D, 4B, 41, 91, 6D, B5, A7, 12, B8, CE, F8, CB, A9, B3, ED, A0, 59, 1D, 61, C0, 2E, 96, 1A, 44, 7F, DB, 3B, 4F, 33, 51, 30, 57, 26, FD, 1D, C9, D6...
 
[+]

Entropy:
7.9637  (probably packed)

Code size:
399 KB (408,576 bytes)

Remove nznotify.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.