Should I block it?

No, this file is 100% safe to run.

Additional versions

5.0.9600.16384 (winblue_rtm.130821-1623)	3.68%
5.0.9600.16384 (winblue_rtm.130821-1623)	0.25%
5.0.9431.0 (winmain_bluemp.130615-1214)	0.20%
5.0.9431.0 (winmain_bluemp.130615-1214)	0.04%
5.0.9200.16384 (win8_rtm.120725-1247)	2.25%
5.0.9200.16384 (win8_rtm.120725-1247)	13.41%
5.0.8400.0 (winmain_win8rc.120518-1423)	0.08%
5.0.8400.0 (winmain_win8rc.120518-1423)	0.08%
5.0.8250.0 (winmain_win8beta.120217-1520)	0.04%
5.0.8102.0 (winmain_win8m3.110823-1455)	0.08%
5.0.7600.16385 (win7_rtm.090713-1255)	5.03%
5.0.7600.16385 (win7_rtm.090713-1255)	35.73%
5.0.7600.16385 (win7_rtm.090713-1255)	17.42%
5.0.7600.16385 (win7_rtm.090713-1255)	3.27%
5.0.7600.16385 (win7_rtm.090713-1255)	0.04%
5.0.7264.0 (win7_rtm.090622-1900)	0.04%
4.5.6002.18005 (lh_sp2rtm.090410-1830)	0.65%
4.5.6002.18005 (lh_sp2rtm.090410-1830)	0.12%
4.5.6001.22159 (vistasp1_ldr.080415-1732)	4.62%
4.5.6001.22159 (vistasp1_ldr.080415-1732)	0.04%
4.5.6001.22159 (vistasp1_ldr.080415-1732)	0.04%
4.5.6001.22159 (vistasp1_ldr.080415-1732)	0.12%
4.5.6001.22159 (vistasp1_ldr.080415-1732)	0.08%
4.5.6001.22159 (vistasp1_ldr.080415-1732)	0.12%
4.5.6001.22159 (vistasp1_ldr.080415-1732)	0.04%
View more
4.5.6001.22159 (vistasp1_ldr.080415-1732)	0.04%
4.5.6001.22159 (vistasp1_ldr.080415-1732)	0.04%
3.1.4001.5512	8.01%
3.1.4001.5512	0.12%
3.1.4001.5512	0.33%
3.1.4001.5512	0.08%
3.1.4001.5512	0.08%
3.1.4001.5512	0.04%
3.1.4001.5512	0.20%
3.1.4001.5512	0.04%
3.1.4001.5512	0.33%
3.1.4001.5512	0.08%
3.1.4001.5512	0.04%
3.1.4001.5512	0.20%
3.1.4001.5512	0.04%
3.1.4001.5512	0.04%
3.1.4001.5512	0.12%
3.1.4001.5512	0.04%
3.1.4001.5512	0.04%
3.1.4001.5512	0.04%
3.1.4001.5512	0.04%
3.1.4001.5512	0.04%
3.1.4001.5512	0.04%
3.1.4001.3311	0.04%
3.1.4001.3244	0.04%
3.1.4000.3959	0.08%
5 other versions

Relationships

setup.exe (Windows Installer by Microsoft Corporation)

PE file structure

Show functions

Import table

advapi32.dll

RegOpenKeyExW, RegCreateKeyExW, AdjustTokenPrivileges, LookupPrivilegeValueW, OpenProcessToken, OpenThreadToken, FreeSid, GetLengthSid, AllocateAndInitializeSid, DeregisterEventSource, ReportEventW, RegisterEventSourceW, MakeSelfRelativeSD, GetSecurityDescriptorLength, SetSecurityDescriptorGroup, SetSecurityDescriptorOwner, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, GetAce, AddAccessAllowedAce, InitializeAcl, RegCloseKey, RegSetValueExW, RegDeleteKeyW, RegQueryValueExW, RegDeleteValueW, RegEnumKeyW, CloseServiceHandle, CreateServiceW, OpenSCManagerW, SetThreadToken, DeleteService, QueryServiceStatus, ControlService, OpenServiceW, RegEnumKeyExW, SetServiceStatus, RegisterServiceCtrlHandlerW, EqualSid, GetSecurityDescriptorOwner, RegGetKeySecurity, MakeAbsoluteSD, GetTokenInformation, RevertToSelf, StartServiceCtrlDispatcherW, TraceMessage

kernel32.dll

lstrlenW, lstrcmpiW, CloseHandle, InterlockedExchange, GetCurrentProcess, GetLastError, GetCurrentThread, Sleep, GetVersionExW, GetEnvironmentVariableW, InitializeCriticalSection, DeleteCriticalSection, GetProcAddress, LoadLibraryW, MultiByteToWideChar, WideCharToMultiByte, SetLastError, GlobalAlloc, GlobalFree, FreeLibrary, UnhandledExceptionFilter, GetVersion, GetModuleHandleW, WaitForSingleObject, CreateProcessW, GetModuleFileNameW, InterlockedDecrement, InterlockedIncrement, lstrcmpW, FormatMessageW, GetSystemDefaultLangID, LoadLibraryExW, SetCurrentDirectoryW, OutputDebugStringW, WriteFile, GetLocaleInfoW, GetACP, LeaveCriticalSection, EnterCriticalSection, OpenProcess, CreateEventW, OpenEventW, CompareStringW, GetFileType, GetStdHandle, GetCommandLineW, ExitProcess, SetEvent, SetConsoleCtrlHandler, CreateThread, GetSystemDirectoryW, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, GetModuleHandleA, TerminateProcess, SetUnhandledExceptionFilter, GetStartupInfoA, InterlockedCompareExchange, GetModuleHandleExW, DelayLoadFailureHook, LoadLibraryExA, CancelWaitableTimer

msvcrt.dll

DllMain

ntdll.dll

RtlNtStatusToDosError, RtlUnwind, NtQueryInformationProcess

ole32.dll

CoInitialize, CoRevokeClassObject, CoRegisterClassObject, StgOpenStorage, CoUninitialize

rpcrt4.dll

RpcRaiseException, RpcEpUnregister, RpcBindingVectorFree, RpcServerUnregisterIf, RpcServerUseProtseqW, RpcServerInqBindings, RpcServerRegisterIfEx, RpcEpRegisterW, NdrServerCall2

user32.dll

MsgWaitForMultipleObjects, IsCharAlphaNumericW, GetMessageW, PeekMessageW, DispatchMessageW, TranslateMessage, PostQuitMessage, PostThreadMessageW

msiexec.exe

Windows Installer - Unicode by Microsoft

Remove msiexec.exe

Version:	3.1.4001.5512
MD5:	4700ce2316e624678cfd2bcb72ebb6fa
SHA1:	ec1aca8659c40ab0c597fe23d5f1f874537b1b44
SHA256:	780f4afb7e7b4acc3f20fbaa4c4f40755401277bfc54aa2d6f6e39658bfaaa19

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is msiexec.exe?

Microsoft Windows Installer is an installation and configuration service provided with Windows. The installer service enables customers to provide better corporate deployment and provides a standard format for component management. The installer also enables the advertisement of applications and features according to the operating system.

Overview

msiexec.exe runs as a service under the name Windows Installer -ohjelma (msiserver) within the local user context. It is installed in Internet Explorer as a Browser Helper Object (BHO) which has full acess to the web browser's behaviors and content.

Details

File name:	msiexec.exe
Publisher:	Microsoft Corporation
Product name:	Windows Installer - Unicode
Description:	Windows® installer
Typical file path:	C:\Windows\System32\msiexec.exe
Original name:	msiexec.exe.mui
File version:	3.1.4001.5512
Size:	77 KB (78,848 bytes)
Digital DNA
PE subsystem:	Windows GUI
Entropy:	5.753598
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No

More details

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

msiserver
'msiserver' (Windows Installer)

Scheduled tasks

The job '{AD1C092E-8BF9-4322-8B6D-869115BC67D2}' runs on registration in the path '\{AD1C092E-8BF9-4322-8B6D-869115BC67D2}'
The job '{EFAD775F-CDF7-4932-BC9F-7C11500B0E27}' runs on registration in the path '\{EFAD775F-CDF7-4932-BC9F-7C11500B0E27}'
The task '{AF16EC4C-C7D3-4650-BE4D-593A0E554F4A}' runs on registration in the path '\{AF16EC4C-C7D3-4650-BE4D-593A0E554F4A}'
The task '{2A68DB8E-C884-4452-862A-37F7C7E8C162}' runs on registration in the path '\{2A68DB8E-C884-4452-862A-37F7C7E8C162}'
The task '{47FC463B-9928-45D3-823C-B4D5F78A7363}' runs on registration in the path '\{47FC463B-9928-45D3-823C-B4D5F78A7363}'
The task '{FB16A2A3-DB26-4127-9711-C5E0BF071B10}' runs on registration in the path '\{FB16A2A3-DB26-4127-9711-C5E0BF071B10}'
The job '{E29801CF-E188-4C12-9343-76AFA0F16BEB}' runs on registration in the path '\{E29801CF-E188-4C12-9343-76AFA0F16BEB}'
The job '{1869EC6C-EE7B-4B66-B13A-A2FF8E7EBDD0}' runs on registration in the path '\{1869EC6C-EE7B-4B66-B13A-A2FF8E7EBDD0}'
The job '{AF8E4C1B-E35B-4C57-9A64-1CB2C21CFA46}' runs on registration in the path '\{AF8E4C1B-E35B-4C57-9A64-1CB2C21CFA46}'
The job '{C02B77F7-A5CC-4BBE-90BF-75B82251A853}' runs on registration in the path '\{C02B77F7-A5CC-4BBE-90BF-75B82251A853}'
The job '{161E942A-7077-4225-AAE1-3727163FBBBF}' runs on registration in the path '\{161E942A-7077-4225-AAE1-3727163FBBBF}'
The task '{603A289F-660C-4649-8820-58FD6E7AA78F}' runs on registration in the path '\{603A289F-660C-4649-8820-58FD6E7AA78F}'
Entry path '\{8C9E5B76-E78A-411A-B939-C6A034267770}'
Entry path '\{7F6FE1B4-CD5C-4EB3-BA3C-FA05AEE67CB6}'
Entry path '\{0E478F47-D66E-4DE5-8BE0-876334CD9EBD}'
Entry path '\{E673B621-598C-4A26-8A81-2A485793D284}'
Entry path '\{C19210A5-228E-4FEA-8C35-D871B9C4FB5F}'
Entry path '\{9A26DFD9-8384-4F4C-B4E8-58F5A8829AFB}'
Entry path '\{5AA35628-621C-4869-8C3F-FDDA0E1007B1}'
Entry path '\{36EF27E1-070B-4449-BB00-BFD5F2EC510B}'
Entry path '\{1DCAC8D1-9B4D-4FF8-ABA2-CFD2CD44EEB3}'
Entry path '\{E7F58D98-807C-426A-8F92-2766A35F2221}'

Internet Explorer Browser Helper Object

Located in the registry at 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects'

BHO CLSID: {127AD70F-B2B7-4f6a-ACD9-C7B1FE48C8C0}

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	59.50%
Windows 7 Ultimate	25.50%
Windows 7 Professional	9.50%
Windows 7 Home Basic	2.50%
Windows 7 Starter	1.50%
Windows 8 Pro	1.00%
Windows 8 Enterprise Evaluation	0.50%

Distribution by country

United States installs about 48.74% of Windows Installer - Unicode.

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	23.57%
Hewlett-Packard	18.63%
ASUS	12.93%
Toshiba	12.93%
Acer	11.79%
Lenovo	4.56%
Samsung	3.04%
Sony	3.04%
GIGABYTE	3.04%
Gateway	1.52%
MSI	1.52%
Alienware	0.76%
Medion	0.76%
Intel	0.76%
NEC	0.76%
Sahara	0.38%

Remove Adware and Spyware Programs, FREE Download!