» Setup.dll
Overview
Analysis
File Details
Programs (1)
Downloads (1)

Setup.dll

The Weather Channel Interactive Consumer Application Software

The Weather Channel Interactive, Inc.

This is installed with The Weather Channel Desktop 6. The file has been seen being downloaded from download.weather.com.

File name:

Setup.dll

Publisher:

The Weather Channel Interactive (signed by The Weather Channel Interactive, Inc.)

Product:

The Weather Channel Interactive Consumer Application Software

Version:

6.0.0.36

MD5:

c3a455e1ef6d287bf2e8c3032d0e3fb4

SHA-1:

efc18eb5d839d00dfe67ce303fe9f100b5f9e316

SHA-256:

8d4d4b08d7b16418f629892200e61cb95c93d8e9c498d9619482deed13b485dc

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/26/2024 1:22:26 AM UTC (today)

File size:

1.4 MB (1,461,432 bytes)

Product version:

6.0.0.36

Original file name:

Setup.dll

File type:

Dynamic link library (Win32 DLL)

Common path:

C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\setup.dll

Digital Signature

Signed by:

The Weather Channel Interactive, Inc.

Authority:

VeriSign, Inc.

Valid from:

8/18/2010 4:00:00 AM

Valid to:

8/25/2013 3:59:59 AM

Subject:

CN="The Weather Channel Interactive, Inc.", OU=weather.com, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="The Weather Channel Interactive, Inc.", L=Atlanta, S=Georgia, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

0CF27D8CB4EDA3914349710E84B06FB1

File PE Metadata

Compilation timestamp:

5/5/2011 3:35:01 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

12288:Eij0PaUYj7rf94cUi6IN26mgFaVQlRGX8UApseuop6Y0dysj/++uGOxuLaVFlRGc:jjWYRmgaOlIX8UNeuZMsqGBqyU4jm

Entry address:

0x87B07

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, F4, 8D, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 83, 3D, 00, E7, 11, 10, 00, 56, 8B, 35, FC, 91, 11, 10, 75, 04, 33, C0, 5E, C3, 85, F6, 53, 57, 75, 1B, 39, 35, 04, 92, 11, 10, 74, 51, E8, 4F, 8F, 00, 00, 85, C0, 75, 48, 8B, 35, FC, 91, 11, 10, 85, F6, 74, 3E, 8B, 5C, 24, 10, 85, DB, 74, 36, 53, E8, 55, 22, 00, 00, 59, 8B, F8, EB, 25, 50, E8, 4A, 22, 00, 00, 3B, C7, 59, 76, 17, 8B, 06, 80, 3C, 38, 3D, 75, 0F, 57, 53, 50, E8... 
[+]

Entropy:

6.6906

Code size:

936 KB (958,464 bytes)

The file Setup.dll has been discovered within the following program.

The Weather Channel Desktop 6 by The Weather Channel

Publisher's description - “The Weather Channel App for Windows provides instant severe weather alerts, extended forecasts, interactive maps, radar and much more.”

www.weather.com/services/winapp.html

22% remove it

The file Setup.dll has been seen being distributed by the following URL.

http://download.weather.com/web/dwzeus/dw6/install/.../Setup.dll

Scan Setup.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.