» SetupNT.dll
Overview
Analysis
File Details
Programs (4)

SetupNT.dll

Port Magic

Pure Networks, Inc.

This is installed with multiple programs including Pure Networks Port Magic.

File name:

SetupNT.dll

Publisher:

Pure Networks, Inc. (signed and verified)

Product:

Port Magic

Description:

Setup NT Helper DLL

Version:

1.2.1393.0

MD5:

c4a402962e86e80972ff846b90657c4b

SHA-1:

f4c7a3bdbfaf3b346317d9a6e7ee11f748d0517b

SHA-256:

1f993b6e062102938b212f6ecd43003b3cf5df8087dc8e36d787335e45b5cf8a

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/24/2024 8:50:31 AM UTC (today)

File size:

49.1 KB (50,328 bytes)

Product version:

1.2.1393.0

Original file name:

SetupNT.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\pure networks\port magic\setupnt.dll

Digital Signature

Signed by:

Pure Networks, Inc.

Authority:

VeriSign, Inc.

Valid from:

12/10/2003 3:00:00 AM

Valid to:

12/31/2004 2:59:59 AM

Subject:

CN="Pure Networks, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Pure Networks, Inc.", L=Seattle, S=Washington, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2001 CA, OU=Terms of use at https://www.verisign.com/rpa (c)01, OU=VeriSign Trust Network, O="VeriSign, Inc."

Serial number:

72E87757305828C3408C414729FB8FB3

File PE Metadata

Compilation timestamp:

4/5/2004 7:42:02 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

7.0

CTPH (ssdeep):

768:NhWF6r30xMiESyBcrwf8IFEk82GhWKYbncF/NL36oYU:NhA6rExTE3BcrwEpkUh7MnchNeoD

Entry address:

0x153C

Entry point:

55, 8B, EC, 53, 8B, 5D, 08, 56, 8B, 75, 0C, 85, F6, 57, 8B, 7D, 10, 75, 09, 83, 3D, 40, 89, 00, 10, 00, EB, 26, 83, FE, 01, 74, 05, 83, FE, 02, 75, 22, A1, 3C, 91, 00, 10, 85, C0, 74, 09, 57, 56, 53, FF, D0, 85, C0, 74, 0C, 57, 56, 53, E8, 42, FE, FF, FF, 85, C0, 75, 04, 33, C0, EB, 4E, 57, 56, 53, E8, 0E, 1D, 00, 00, 83, FE, 01, 89, 45, 0C, 75, 0C, 85, C0, 75, 37, 57, 50, 53, E8, 1E, FE, FF, FF, 85, F6, 74, 05, 83, FE, 03, 75, 26, 57, 56, 53, E8, 0D, FE, FF, FF, 85, C0, 75, 03, 21, 45, 0C, 83, 7D, 0C, 00... 
[+]

Entropy:

5.2600

Code size:

20 KB (20,480 bytes)

The file SetupNT.dll has been discovered within the following programs.

Pure Networks Port Magic by Pure Networks

26% remove it

Search Protect by Client Connect LTD

Search Protect from Client Connect (formally Conduit, now a venture of Perion) is a homepage and search provider modifier that when installed will change the default web browser's home page and search pages to a partner portal such as Trovi.

www.conduit.com/searchprotect

79% remove it

WSE_Vosteran by ClickMeIn Limited

86% remove it

Yahoo! Install Manager by Yahoo! Inc.

Yahoo Install Manager manages Yahoo program downloads and installations. The install manager keeps track of such programs and assists in the installations to put things in their proper places.

www.yahoo.com

20% remove it

Scan SetupNT.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.