home

D3D11Install.EXE

DirectX SDK

Microsoft Corporation

This is a setup and installation application. The file has been seen being downloaded from drive.google.com and multiple other hosts.
Publisher:
Microsoft Corporation

Product:
DirectX SDK

Description:
Direct3D 11 Install Helper Command-line EXE

Version:
1.00.000.0000

MD5:
db1456980a5cf7427ce1c129a99bba56

SHA-1:
b48ce38c9466f34df7481845c24ba6f66ab1b211

SHA-256:
eef07331eed38e3a9529a5b961402ec9e5b603717a7e9fae189ac88aa18abd13

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
9/16/2025 4:44:34 AM UTC  (today)

File size:
306 KB (313,344 bytes)

Product version:
1.00.000.0000

Copyright:
Copyright (C) Microsoft Corporation

Original file name:
D3D11Install.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\origin games\fifa 16 demo\__installer\directx11\redist\d3d11install.exe

File PE Metadata
Compilation timestamp:
8/5/2015 11:41:19 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
3072:ZEgGaWm1yLLyWd+Ii2P1ILa2RBvCj1mhSrxXwGWNeW0XxQPGMOgixwnxBM+zAcML:2MyXQkPZV1

Entry address:
0x3C19

Entry point:
E8, 56, 2E, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 28, 6B, 41, 00, E8, 21, 23, 00, 00, E8, AE, 1F, 00, 00, 0F, B7, F0, 6A, 02, E8, E9, 2D, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, A8, 25, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Code size:
64 KB (65,536 bytes)

The file D3D11Install.EXE has been seen being distributed by the following 3 URLs.

https://drive.google.com/uc?export=download&confirm=-GJe&id=0B01aKXC2tlSVUHNQMjdYVldhN1k

https://drive.google.com/uc?id=0B01aKXC2tlSVUHNQMjdYVldhN1k&export=download

https://doc-0o-1o-docs.googleusercontent.com/docs/securesc/vvgcc0pl0vam2qiokkblfshcaion6r2h/u0f6g5n5nejpa4rl2j4u9rltahsvjiis/1458331200000/08734787906870402060/.../0B01aKXC2tlSVUHNQMjdYVldhN1k?e=download

Scan D3D11Install.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.