drvinst.exe

  • File Path: C:\Windows\system32\drvinst.exe
  • Description: Driver Installation Module

Hashes

Type Hash
MD5 188CE3916E9FD3D123F38F01F8F8B93C
SHA1 8C5B77915FD2F67FB0B45609785AFEF0BFA710F1
SHA256 C196086017725E8724DAB1DFDFABA9F4B7CFACD47A885BCC81984F8BC78D9F75
SHA384 543123421E13AD4B3398E4AA95440D7F73107A5A8A931D1DB19305311BED47DEEA96CEB518445FAFE79679C1200FE2D2
SHA512 6553BD32D33CA3D77DF4A1E6E17E12A4A42EEB3BBF3D642FEABD367508D65721EB802B6CD16E72EF64C0306BD42B3AC3B9A863D7D5D5D89C3F50BFE7DE17B839
SSDEEP 3072:ibFtPkdahbAIdY1LdxggXlQYUw/pf1YVI9L50b9yoHO5T4ucsiR:6jkda/Y1RmoUMtOrkLT4ux

Signature

  • Status: Signature verified.
  • Serial: 33000000BCE120FDD27CC8EE930000000000BC
  • Thumbprint: E85459B23C232DB3CB94C7A56D47678F58E8E51E
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: DrvInst.EXE.MUI
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.14393.0 (rs1_release.160715-1616)
  • Product Version: 10.0.14393.0
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

Possible Misuse

The following table contains possible examples of drvinst.exe being misused. While drvinst.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
malware-ioc nukesped_lazarus .DrvInst.exe``{:.highlight .language-cmhg} © ESET 2014-2018

MIT License. Copyright (c) 2020-2021 Strontic.