Should I block it?

No, this file is 100% safe to run.

Additional versions

5.0.9600.16384 (winblue_rtm.130821-1623)	3.68%
5.0.9600.16384 (winblue_rtm.130821-1623)	0.25%
5.0.9431.0 (winmain_bluemp.130615-1214)	0.20%
5.0.9431.0 (winmain_bluemp.130615-1214)	0.04%
5.0.9200.16384 (win8_rtm.120725-1247)	2.25%
5.0.9200.16384 (win8_rtm.120725-1247)	13.41%
5.0.8400.0 (winmain_win8rc.120518-1423)	0.08%
5.0.8400.0 (winmain_win8rc.120518-1423)	0.08%
5.0.8250.0 (winmain_win8beta.120217-1520)	0.04%
5.0.8102.0 (winmain_win8m3.110823-1455)	0.08%
5.0.7600.16385 (win7_rtm.090713-1255)	5.03%
5.0.7600.16385 (win7_rtm.090713-1255)	35.73%
5.0.7600.16385 (win7_rtm.090713-1255)	17.42%
5.0.7600.16385 (win7_rtm.090713-1255)	3.27%
5.0.7600.16385 (win7_rtm.090713-1255)	0.04%
5.0.7264.0 (win7_rtm.090622-1900)	0.04%
4.5.6002.18005 (lh_sp2rtm.090410-1830)	0.65%
4.5.6002.18005 (lh_sp2rtm.090410-1830)	0.12%
4.5.6001.22159 (vistasp1_ldr.080415-1732)	4.62%
4.5.6001.22159 (vistasp1_ldr.080415-1732)	0.04%
4.5.6001.22159 (vistasp1_ldr.080415-1732)	0.04%
4.5.6001.22159 (vistasp1_ldr.080415-1732)	0.12%
4.5.6001.22159 (vistasp1_ldr.080415-1732)	0.08%
4.5.6001.22159 (vistasp1_ldr.080415-1732)	0.12%
4.5.6001.22159 (vistasp1_ldr.080415-1732)	0.04%
View more
4.5.6001.22159 (vistasp1_ldr.080415-1732)	0.04%
4.5.6001.22159 (vistasp1_ldr.080415-1732)	0.04%
3.1.4001.5512	8.01%
3.1.4001.5512	0.12%
3.1.4001.5512	0.33%
3.1.4001.5512	0.08%
3.1.4001.5512	0.08%
3.1.4001.5512	0.04%
3.1.4001.5512	0.20%
3.1.4001.5512	0.04%
3.1.4001.5512	0.33%
3.1.4001.5512	0.08%
3.1.4001.5512	0.04%
3.1.4001.5512	0.20%
3.1.4001.5512	0.04%
3.1.4001.5512	0.04%
3.1.4001.5512	0.12%
3.1.4001.5512	0.04%
3.1.4001.5512	0.04%
3.1.4001.5512	0.04%
3.1.4001.5512	0.04%
3.1.4001.5512	0.04%
3.1.4001.5512	0.04%
3.1.4001.3311	0.04%
3.1.4001.3244	0.04%
3.1.4000.3959	0.08%
5 other versions

Relationships

setup.exe (Windows Installer by Microsoft Corporation)

PE file structure

Show functions

Import table

advapi32.dll

RegOpenKeyExW, RegCreateKeyExW, AdjustTokenPrivileges, LookupPrivilegeValueW, OpenProcessToken, OpenThreadToken, FreeSid, GetLengthSid, AllocateAndInitializeSid, DeregisterEventSource, ReportEventW, RegisterEventSourceW, MakeSelfRelativeSD, GetSecurityDescriptorLength, SetSecurityDescriptorGroup, SetSecurityDescriptorOwner, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, GetAce, AddAccessAllowedAce, InitializeAcl, RegCloseKey, RegSetValueExW, RegDeleteKeyW, RegQueryValueExW, RegDeleteValueW, RegEnumKeyW, CloseServiceHandle, CreateServiceW, OpenSCManagerW, SetThreadToken, DeleteService, QueryServiceStatus, ControlService, OpenServiceW, RegEnumKeyExW, SetServiceStatus, RegisterServiceCtrlHandlerW, EqualSid, GetSecurityDescriptorOwner, RegGetKeySecurity, MakeAbsoluteSD, GetTokenInformation, RevertToSelf, StartServiceCtrlDispatcherW, TraceMessage

kernel32.dll

lstrlenW, lstrcmpiW, CloseHandle, InterlockedExchange, GetCurrentProcess, GetLastError, GetCurrentThread, Sleep, GetVersionExW, GetEnvironmentVariableW, InitializeCriticalSection, DeleteCriticalSection, GetProcAddress, LoadLibraryW, MultiByteToWideChar, WideCharToMultiByte, SetLastError, GlobalAlloc, GlobalFree, FreeLibrary, UnhandledExceptionFilter, GetVersion, GetModuleHandleW, WaitForSingleObject, CreateProcessW, GetModuleFileNameW, InterlockedDecrement, InterlockedIncrement, lstrcmpW, FormatMessageW, GetSystemDefaultLangID, LoadLibraryExW, SetCurrentDirectoryW, OutputDebugStringW, WriteFile, GetLocaleInfoW, GetACP, LeaveCriticalSection, EnterCriticalSection, OpenProcess, CreateEventW, OpenEventW, CompareStringW, GetFileType, GetStdHandle, GetCommandLineW, ExitProcess, SetEvent, SetConsoleCtrlHandler, CreateThread, GetSystemDirectoryW, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, GetModuleHandleA, TerminateProcess, SetUnhandledExceptionFilter, GetStartupInfoA, InterlockedCompareExchange, GetModuleHandleExW, DelayLoadFailureHook, LoadLibraryExA, CancelWaitableTimer

msvcrt.dll

DllMain

ntdll.dll

RtlNtStatusToDosError, RtlUnwind, NtQueryInformationProcess

ole32.dll

CoInitialize, CoRevokeClassObject, CoRegisterClassObject, StgOpenStorage, CoUninitialize

rpcrt4.dll

RpcRaiseException, RpcEpUnregister, RpcBindingVectorFree, RpcServerUnregisterIf, RpcServerUseProtseqW, RpcServerInqBindings, RpcServerRegisterIfEx, RpcEpRegisterW, NdrServerCall2

user32.dll

MsgWaitForMultipleObjects, IsCharAlphaNumericW, GetMessageW, PeekMessageW, DispatchMessageW, TranslateMessage, PostQuitMessage, PostThreadMessageW

msiexec.exe

Windows Installer - Unicode by Microsoft

Remove msiexec.exe

Version:	3.1.4001.5512
MD5:	8b53ca4a623145b90867175702026ebd
SHA1:	3a6e7fa146279ba7b0f9f097e12f20ca9a4e3fa3
SHA256:	35f96f5d3979dfbdc9cdd285b858b32eb94f3e214105b24252c9ec770fe085c5

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is msiexec.exe?

Microsoft Windows Installer is an installation and configuration service provided with Windows. The installer service enables customers to provide better corporate deployment and provides a standard format for component management. The installer also enables the advertisement of applications and features according to the operating system.

Overview

msiexec.exe runs as a service under the name Windows Installer -ohjelma (msiserver) within the local user context. It is installed in Internet Explorer as a Browser Helper Object (BHO) which has full acess to the web browser's behaviors and content.

Details

File name:	msiexec.exe
Publisher:	Microsoft Corporation
Product name:	Windows Installer - Unicode
Description:	Windows® installer
Typical file path:	C:\Windows\System32\msiexec.exe
Original name:	msiexec.exe.mui
File version:	3.1.4001.5512
Size:	97.5 KB (99,840 bytes)
Digital DNA
PE subsystem:	Windows GUI
Entropy:	5.753598
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No

More details

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

msiserver
'msiserver' (Windows Installer)

Scheduled tasks

The job '{AD1C092E-8BF9-4322-8B6D-869115BC67D2}' runs on registration in the path '\{AD1C092E-8BF9-4322-8B6D-869115BC67D2}'
The job '{EFAD775F-CDF7-4932-BC9F-7C11500B0E27}' runs on registration in the path '\{EFAD775F-CDF7-4932-BC9F-7C11500B0E27}'
The task '{AF16EC4C-C7D3-4650-BE4D-593A0E554F4A}' runs on registration in the path '\{AF16EC4C-C7D3-4650-BE4D-593A0E554F4A}'
The task '{2A68DB8E-C884-4452-862A-37F7C7E8C162}' runs on registration in the path '\{2A68DB8E-C884-4452-862A-37F7C7E8C162}'
The task '{47FC463B-9928-45D3-823C-B4D5F78A7363}' runs on registration in the path '\{47FC463B-9928-45D3-823C-B4D5F78A7363}'
The task '{FB16A2A3-DB26-4127-9711-C5E0BF071B10}' runs on registration in the path '\{FB16A2A3-DB26-4127-9711-C5E0BF071B10}'
The job '{E29801CF-E188-4C12-9343-76AFA0F16BEB}' runs on registration in the path '\{E29801CF-E188-4C12-9343-76AFA0F16BEB}'
The job '{1869EC6C-EE7B-4B66-B13A-A2FF8E7EBDD0}' runs on registration in the path '\{1869EC6C-EE7B-4B66-B13A-A2FF8E7EBDD0}'
The job '{AF8E4C1B-E35B-4C57-9A64-1CB2C21CFA46}' runs on registration in the path '\{AF8E4C1B-E35B-4C57-9A64-1CB2C21CFA46}'
The job '{C02B77F7-A5CC-4BBE-90BF-75B82251A853}' runs on registration in the path '\{C02B77F7-A5CC-4BBE-90BF-75B82251A853}'
The job '{161E942A-7077-4225-AAE1-3727163FBBBF}' runs on registration in the path '\{161E942A-7077-4225-AAE1-3727163FBBBF}'
The task '{603A289F-660C-4649-8820-58FD6E7AA78F}' runs on registration in the path '\{603A289F-660C-4649-8820-58FD6E7AA78F}'
Entry path '\{8C9E5B76-E78A-411A-B939-C6A034267770}'
Entry path '\{7F6FE1B4-CD5C-4EB3-BA3C-FA05AEE67CB6}'
Entry path '\{0E478F47-D66E-4DE5-8BE0-876334CD9EBD}'
Entry path '\{E673B621-598C-4A26-8A81-2A485793D284}'
Entry path '\{C19210A5-228E-4FEA-8C35-D871B9C4FB5F}'
Entry path '\{9A26DFD9-8384-4F4C-B4E8-58F5A8829AFB}'
Entry path '\{5AA35628-621C-4869-8C3F-FDDA0E1007B1}'
Entry path '\{36EF27E1-070B-4449-BB00-BFD5F2EC510B}'
Entry path '\{1DCAC8D1-9B4D-4FF8-ABA2-CFD2CD44EEB3}'
Entry path '\{E7F58D98-807C-426A-8F92-2766A35F2221}'

Internet Explorer Browser Helper Object

Located in the registry at 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects'

BHO CLSID: {127AD70F-B2B7-4f6a-ACD9-C7B1FE48C8C0}

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	59.50%
Windows 7 Ultimate	25.50%
Windows 7 Professional	9.50%
Windows 7 Home Basic	2.50%
Windows 7 Starter	1.50%
Windows 8 Pro	1.00%
Windows 8 Enterprise Evaluation	0.50%

Distribution by country

United States installs about 48.74% of Windows Installer - Unicode.

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	23.57%
Hewlett-Packard	18.63%
ASUS	12.93%
Toshiba	12.93%
Acer	11.79%
Lenovo	4.56%
Samsung	3.04%
Sony	3.04%
GIGABYTE	3.04%
Gateway	1.52%
MSI	1.52%
Alienware	0.76%
Medion	0.76%
Intel	0.76%
NEC	0.76%
Sahara	0.38%

Remove Adware and Spyware Programs, FREE Download!