home

devcon_win7_x86_r.exe

Windows Win 7 DDK driver

DewMobile USA , Inc.

Publisher:
Windows (R) Win 7 DDK provider  (signed by DewMobile USA , Inc.)

Product:
Windows (R) Win 7 DDK driver

Description:
Windows Setup API

Version:
6.2.9200.20557

MD5:
b64170aa25463da7fcfcdd84c7d6a90a

SHA-1:
a2a544a2d5d9c60659f702b28858d9de214ccf20

SHA-256:
011de8e1728835df1ecc2864b5021bf8e97a95b397ae02e943a6d00ffec24d12

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 5:57:39 PM UTC  (today)

File size:
231 KB (236,528 bytes)

Product version:
6.2.9200.20557

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
SETUPAPI.DLL

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\zapya-en\devcon_win7_x86_r.exe

Digital Signature
Signed by:
DewMobile USA , Inc.

Authority:
COMODO CA Limited

Valid from:
1/28/2014 3:30:00 AM

Valid to:
1/29/2015 3:29:59 AM

Subject:
CN="DewMobile USA , Inc.", O="DewMobile USA , Inc.", STREET="2901 Tasman Dr., Suite 107", L=Santa Clara, S=CA, PostalCode=95054, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00E5103347B208ADC27A4FCE6D2D3D2DC2

File PE Metadata
Compilation timestamp:
8/5/2014 9:54:44 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

CTPH (ssdeep):
3072:E9Dvv5tDyWm4c7wjvcEwqZxEhdLEhCuFZcpcYIj1ww+9MSV0RWDRCVQc1H:E9Lhc4c7e4LlWZcFmw3yxVB1H

Entry address:
0x782C

Entry point:
E8, 31, 59, 00, 00, E9, 35, FE, FF, FF, 55, 8B, EC, A1, E0, DC, 42, 00, 85, C0, 75, 1D, E8, 6B, 53, 00, 00, 6A, 1E, E8, C1, 53, 00, 00, 68, FF, 00, 00, 00, E8, 72, 2E, 00, 00, A1, E0, DC, 42, 00, 59, 59, 8B, 4D, 08, 85, C9, 75, 01, 41, 51, 6A, 00, 50, FF, 15, 58, 41, 42, 00, 5D, C3, 55, 8B, EC, 56, 8B, 75, 08, 83, FE, E0, 77, 6F, 53, 57, A1, E0, DC, 42, 00, 85, C0, 75, 1D, E8, 23, 53, 00, 00, 6A, 1E, E8, 79, 53, 00, 00, 68, FF, 00, 00, 00, E8, 2A, 2E, 00, 00, A1, E0, DC, 42, 00, 59, 59, 85, F6, 74, 04, 8B...
 
[+]

Entropy:
6.1699

Code size:
138 KB (141,312 bytes)

Scan devcon_win7_x86_r.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.