home

dpinst-x86.exe

Driver Package Installer (DPInst)

Microsoft Corporation

Publisher:
Microsoft Corporation

Product:
Driver Package Installer (DPInst)

Description:
Driver Package Installer

Version:
2.1

MD5:
905cdd765b16182177cee55d4b6950ae

SHA-1:
bd516fd90fe025e32c17b3571840184105ddc566

SHA-256:
555e06642d9e81e0c47f93ce16aec3a8d4c8af9f02d6e6703c60df05a35ea6d8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 8:48:44 PM UTC  (today)

File size:
711.5 KB (728,532 bytes)

Product version:
2.1

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
DPInst.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\dpinst-x86.exe

File PE Metadata
Compilation timestamp:
5/23/2009 3:15:06 AM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:gZqSpwmxvL/f3vCmkPkrAyIQjQGYCHILQnam0iRf:sqSpwADf3qmkPGkGYC2Qam04

Entry address:
0x89000

Entry point:
68, 67, 83, 05, 01, 5B, 68, 1A, 90, 08, 01, 5E, 90, BF, 98, 05, 00, 00, 90, 31, 1C, 3E, 90, 83, EF, 03, 4F, 75, F6, 90, 8F, FE, 04, 01, 67, 83, 05, 01, 67, 83, 05, 00, 0D, 92, 07, 01, A7, E4, 0D, 01, B3, EE, 0D, 01, 67, 33, 07, 01, 67, 83, 05, 01, 8B, 93, 05, 00, 57, 99, 03, 00, 21, 99, 03, 00, FB, 86, 03, 01, 49, 99, 03, 01, 23, 99, 03, 01, 8B, 87, 05, 01, 49, 99, 03, 01, 23, 99, 03, 01, 67, 83, 05, 01, 67, 83, 05, 01, 67, 83, 05, 01, 67, 83, 05, 01, 83, 92, 05, 00, 67, 83, 05, 01, 67, 83, 05, 01, 67, 83...
 
[+]

Entropy:
6.7991

Code size:
392 KB (401,408 bytes)

The file dpinst-x86.exe has been seen being distributed by the following URL.

http://atfupdate.atfsupport.com/.../index.php?dir=atf_new_drivers&dl=dpinst-x86.exe

Scan dpinst-x86.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.