home

DPInst.exe

Driver Package Installer (DPInst)

Microsoft Corporation

This is a self-extracting archive and installer. The file has been seen being downloaded from download.kingoapp.com.
Publisher:
Microsoft Corporation

Product:
Driver Package Installer (DPInst)

Description:
Driver Package Installer

Version:
2.1

MD5:
83108bae83886196bb697b2b9da5b6b6

SHA-1:
077bbbbb1ecc1c0690734b6c3cfc69404e5fb68c

SHA-256:
f1bb9655f5904a4347054ca2711075a36fdd7dc4d77b3b3c06573cbf87e05dbe

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 2:27:19 PM UTC  (today)

File size:
713 KB (730,070 bytes)

Product version:
2.1

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
DPInst.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\dpinst.exe

File PE Metadata
Compilation timestamp:
5/23/2009 12:15:06 PM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:pZqSpwmxvL/f3vCWkPkrAyIQjJAiAU00818r7lyCcaRMJ5:bqSpwADf3qWkPGeiAr1oly1

Entry address:
0x89000

Entry point:
90, 90, BB, 3B, 1C, D2, 00, 90, BA, 1C, 90, 08, 01, 90, 90, BE, 98, 05, 00, 00, 90, 31, 1C, 32, 83, EE, 04, 90, 75, F7, 90, 90, D3, 61, D3, 00, 3B, 1C, D2, 00, 3B, 1C, D2, 01, 51, 0D, D0, 00, B3, 71, DA, 00, ED, 6F, DA, 00, 3B, AC, D0, 00, 3B, 1C, D2, 00, D7, 0C, D2, 01, 0B, 06, D4, 01, 7D, 06, D4, 01, A7, 19, D4, 00, 15, 06, D4, 00, 7F, 06, D4, 00, D7, 18, D2, 00, 15, 06, D4, 00, 7F, 06, D4, 00, 3B, 1C, D2, 00, 3B, 1C, D2, 00, 3B, 1C, D2, 00, 3B, 1C, D2, 00, DF, 0D, D2, 01, 3B, 1C, D2, 00, 3B, 1C, D2, 00...
 
[+]

Code size:
392 KB (401,408 bytes)

The file DPInst.exe has been seen being distributed by the following URL.

http://download.kingoapp.com/kingoroot/.../DPInst.exe

Scan DPInst.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.