home

devcon.exe

Windows Setup API

Andrey Moiseenko

This is a self-extracting archive and installer.
Publisher:
Microsoft Corporation  (signed by Andrey Moiseenko)

Product:
Microsoft® Windows® Operating System

Description:
Windows Setup API

Version:
6.0.6001.17121 (longhorn.071212-1922)

MD5:
133eb422868f4e7fe93dd6344dcb3f91

SHA-1:
7a3ddc6f1af390dd1a0c7b3213439142ab4a56b4

SHA-256:
b87c9ee23bdaf2dd7ad1f86563c5a9e3c440e47175712823e436b0f3d2f21638

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 8:28:13 AM UTC  (today)

File size:
130.8 KB (133,944 bytes)

Product version:
6.0.6001.17121

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
SETUPAPI.DLL

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\data\ia64\devcon.exe

Digital Signature
Signed by:
Andrey Moiseenko

Authority:
GlobalSign nv-sa

Valid from:
7/18/2011 3:59:04 PM

Valid to:
7/18/2012 3:59:04 PM

Subject:
CN=Andrey Moiseenko, C=RU

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121B2AE0C054AE619F7944C48E57342F6C4

File PE Metadata
Compilation timestamp:
12/13/2007 8:26:52 AM

OS version:
6.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
3072:m3zzTZdvKww1QUWeqd0enIcSCo4umJr2SyRWE:m3DPvlSmcp

Entry address:
0x2080

Entry point:
E0, F2, 00, 01, 00, 00, 00, 00, 00, 80, 21, 01, 00, 00, 00, 00, C0, F6, 00, 01, 00, 00, 00, 00, 00, 80, 21, 01, 00, 00, 00, 00, 20, F7, 00, 01, 00, 00, 00, 00, 00, 80, 21, 01, 00, 00, 00, 00, 00, F8, 00, 01, 00, 00, 00, 00, 00, 80, 21, 01, 00, 00, 00, 00, 00, FC, 00, 01, 00, 00, 00, 00, 00, 80, 21, 01, 00, 00, 00, 00, 40, FC, 00, 01, 00, 00, 00, 00, 00, 80, 21, 01, 00, 00, 00, 00, 00, C3, 01, 01, 00, 00, 00, 00, A0, C3, 01, 01, 00, 00, 00, 00, 06, 80, 80, 86, 80, 81, 80, 00, 00, 10, 03, 86, 80, 86, 82, 80...
 
[+]

Code size:
73 KB (74,752 bytes)

Scan devcon.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.