home

dpinst.exe

Установщик пакетов драйверов (DPInst)

ACTIA Automotive

The executable dpinst.exe, “Установщик пакетов драйверов” has been detected as malware by 10 anti-virus scanners.
Publisher:
Корпорация Майкрософт  (signed by ACTIA Automotive)

Product:
Установщик пакетов драйверов (DPInst)

Description:
Установщик пакетов драйверов

Version:
2.1

MD5:
a76618bfe0a39e199234a7b242975e14

SHA-1:
50f64c50a3013a81d4500bc73adcf34ed3d55c23

SHA-256:
f32b05424a7af4c515f0538af16179e341b8b9e4067beece3c4074435070767e

Scanner detections:
10 / 68

Status:
Malware

Analysis date:
6/2/2026 4:15:36 AM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Neshta
2014.9-150620

ESET NOD32
Win32/Neshta
9.7031

F-Prot
W32/HLLP.41472
v6.4.6.5.141

herdProtect (fuzzy)
variant of dpinstx86.exe
2015.6.20.9

K7 AntiVirus
Virus
13.136.6595

McAfee
W32/HLLP.41472.e
5600.6729

Norman
W32/Neshta.C
11.20150620

nProtect
Virus/W32.Neshta
12.04.05.01

Quick Heal
W32.Neshta.A
6.15.12.00

Trend Micro House Call
PE_NESHTA.A
7.2.171

File size:
777.3 KB (796,000 bytes)

Product version:
2.1

Copyright:
(С) Корпорация Майкрософт. Все права защищены.

Original file name:
DPInst.exe.mui

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\db drivers\win2k\dpinst.exe

Digital Signature
Signed by:
ACTIA Automotive

Authority:
GlobalSign nv-sa

Valid from:
2/23/2009 6:43:26 PM

Valid to:
2/23/2012 6:43:26 PM

Subject:
E=fabien.marchandeau@actia.fr, CN=ACTIA Automotive, O=ACTIA Automotive, C=FR

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000011FA43B56D3

File PE Metadata
Compilation timestamp:
10/17/2006 2:47:22 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:+2BG1lkWPemh/CsOs5Un05pJg6fjlhFbLdG3sBtbIPjVXH+u8s5NwOPL6D3:xc19PtCsOsCn01g6L9aPM26OPg

Entry address:
0x213B9

Entry point:
E8, 2D, 3B, 00, 00, E9, 1A, FE, FF, FF, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 5D, E9, F6, 01, 00, 00, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 5D, E9, E5, FF, FF, FF, CC, CC, CC, CC, CC, 6A, 14, 68, C0, BB, 05, 01, E8, E8, 1B, 00, 00, 83, 65, FC, 00, FF, 4D, 10, 78, 3A, 8B, 4D, 08, 2B, 4D, 0C, 89, 4D, 08, FF, 55, 14, EB, ED, 8B, 45, EC, 89, 45, E4, 8B, 45, E4, 8B, 00, 89, 45, E0, 8B, 45, E0, 81, 38, 63, 73, 6D, E0, 74, 0B, C7, 45, DC, 00, 00, 00, 00, 8B, 45, DC, C3, E8, 41, 3B, 00, 00, 8B, 65, E8, C7, 45...
 
[+]

Code size:
391 KB (400,384 bytes)

Remove dpinst.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.