Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.3.9600.16384 (winblue_rtm.130821-1623) 1.84%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.09%
6.3.9600.16384 (winblue_rtm.130821-1623) 2.62%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.28%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.05%
6.2.9200.16384 (win8_rtm.120725-1247) 2.02%
6.2.9200.16384 (win8_rtm.120725-1247) 8.56%
6.2.9200.16384 (win8_rtm.120725-1247) 5.47%
6.2.9200.16384 (win8_rtm.120725-1247) 0.37%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.09%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.09%
6.2.8250.0 (winmain_win8beta.120217-1520) 0.05%
6.2.8102.0 (winmain_win8m3.110823-1455) 0.09%
6.1.7600.16385 (win7_rtm.090713-1255) 5.80%
6.1.7600.16385 (win7_rtm.090713-1255) 40.94%
6.1.7600.16385 (win7_rtm.090713-1255) 19.46%
6.1.7600.16385 (win7_rtm.090713-1255) 3.73%
6.1.7600.16385 (win7_rtm.090713-1255) 0.05%
6.1.7600.16384 (win7_rtm.090710-1945) 0.05%
6.0.6001.18000 (longhorn_rtm.080118-1840) 6.07%
6.0.6001.18000 (longhorn_rtm.080118-1840) 0.05%
6.0.6001.18000 (longhorn_rtm.080118-1840) 1.43%
6.0.6001.18000 (longhorn_rtm.080118-1840) 0.55%
6.0.6000.16386 (vista_rtm.061101-2205) 0.09%
6.0.6000.16386 (vista_rtm.061101-2205) 0.18%

Relationships

PE structurePE file structure
Show functions
Import table
advapi32.dll
SetServiceStatus, RegCloseKey, RegOpenKeyExW, RegisterServiceCtrlHandlerExW, StartServiceCtrlDispatcherW, OpenProcessToken, RegOpenKeyW, RegCreateKeyExW, RegDeleteKeyW, CloseServiceHandle, InitiateShutdownW, LookupPrivilegeValueW, AdjustTokenPrivileges, ChangeServiceConfigW, QueryServiceConfigW, OpenSCManagerW, OpenServiceW, RegQueryValueExW, RegEnumValueW, TraceMessage, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, CreateRestrictedToken, ConvertStringSidToSidW, CreateProcessAsUserW, RegSetValueExW, FreeSid, CheckTokenMembership, AllocateAndInitializeSid, OpenThreadToken, ImpersonateSelf, RevertToSelf, I_ScRegisterPreshutdownRestart
kernel32.dll
LoadLibraryW, GetSystemDirectoryW, GetTickCount, QueryPerformanceCounter, CreateDirectoryW, ExpandEnvironmentStringsW, GetFullPathNameW, GetFileAttributesExW, GetProcAddress, GetFileAttributesW, GetVersionExW, lstrlenW, GetEnvironmentVariableW, GetSystemTime, MoveFileExW, GetWindowsDirectoryW, CreateProcessW, CreateFileW, SetFileTime, GetExitCodeProcess, FindFirstFileW, CompareFileTime, FindNextFileW, DeleteFileW, FindClose, OutputDebugStringA, UnhandledExceptionFilter, TerminateProcess, GetModuleHandleA, SetUnhandledExceptionFilter, InterlockedCompareExchange, Sleep, GetSystemTimeAsFileTime, GetCurrentProcessId, FreeLibrary, GetCurrentProcess, GetModuleFileNameW, InterlockedDecrement, InterlockedIncrement, LeaveCriticalSection, TryEnterCriticalSection, EnterCriticalSection, InitializeCriticalSection, lstrcmpW, ExitProcess, HeapSetInformation, CreateEventW, GetLastError, CreateThread, WaitForMultipleObjects, TerminateThread, WaitForSingleObject, GetExitCodeThread, CloseHandle, SetEvent, InterlockedExchange, GetCurrentThreadId, LocalFree, GetCurrentThread, GetTempPathW, DeleteCriticalSection, FileTimeToSystemTime, FileTimeToLocalFileTime
msvcrt.dll
DllMain
ntdll.dll
NtQuerySystemInformation
ole32.dll
CoDisconnectContext, CoRevokeClassObject, CoSuspendClassObjects, CoCreateInstance, CoRegisterClassObject, CoInitializeSecurity, CoInitializeEx, CoGetMalloc, CoUninitialize, CoResumeClassObjects, CoRevertToSelf, CoImpersonateClient, CoGetCallContext, CoGetClassObject, CoGetInterfaceAndReleaseStream, CoMarshalInterThreadInterfaceInStream, CoTaskMemFree
user32.dll
GetSystemMetrics

trustedinstaller.exe

Windows Modules Installer by Microsoft

Remove trustedinstaller.exe
Version:   6.0.6001.18000 (longhorn_rtm.080118-1840)
MD5:   16613a1bad034d4ecf957af18b7c2ff5
SHA1:   e3810d0bddafd1345efaabca5c26c5ce4bf4320a
SHA256:   75499618187ed4385984f608d134bb298a4ccb339f70b31e4a8b2cf3e3558396
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is trustedinstaller.exe?

The Windows Modules Installer (trusted Installer) enables installation, modification, and removal of Windows updates and optional components.

Overview

trustedinstaller.exe runs as a service under the name Instalador de Módulos do Windows (TrustedInstaller) with extensive SYSTEM privileges (full administrator access). and is compiled as a 32 bit program.

DetailsDetails

File name:trustedinstaller.exe
Publisher:Microsoft Corporation
Product name:Windows Modules Installer
Description:Microsoft® Windows® Operating System
Typical file path:C:\windows\servicing\trustedinstaller.exe
Original name:TrustedInstaller.exe.mui
File version:6.0.6001.18000 (longhorn_rtm.080118-1840)
Product version:6.0.6001.18000
Size:38.5 KB (39,424 bytes)
Digital DNA
PE subsystem:Windows GUI
Entropy:6.353177
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'TrustedInstaller'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.01828855%
0.028634%
Kernel CPU:0.00740463%
0.013761%
User CPU:0.01088392%
0.014873%
Kernel CPU time:703,658 ms/min
100,923,805ms/min
Memory
Private memory:84.31 MB
21.59 MB
Private (maximum):73.38 MB
Private (minimum):17.57 MB
Non-paged memory:84.31 MB
21.59 MB
Virtual memory:158.88 MB
140.96 MB
Virtual memory (peak):170.45 MB
169.69 MB
Working set:42.46 MB
18.61 MB
Working set (peak):90.18 MB
37.95 MB
Resource allocations
Threads:7
12
Handles:18111
600

BehaviorsProcess properties

Integrety level:System
Platform:32-bit
Command line:C:\windows\servicing\trustedinstaller.exe
Owner:SYSTEM
Windows Service
Service name:TrustedInstaller
Display name:Instalador de Módulos do Windows
Description:“Proporciona instalação, modificação e remoção de atualizações e de componentes opcionais do Windows. Se esse serviço for desativado, a instalação e desinstalação de atualizações do Windows podem falhar no computador.”
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
cbscore.dll
Total CPU:34.75519831%
0.272967%
Kernel CPU:18.06383655%
0.107585%
User CPU:16.69136176%
0.165382%
CPU cycles:654,846,898/sec
5,741,424/sec
Memory:540 KB
1.16 MB
RPCRT4.dll
Total CPU:0.01989327%
Kernel CPU:0.01432315%
User CPU:0.00557012%
CPU cycles:417,532/sec
Memory:776 KB
ADVAPI32.dll
Total CPU:0.00635210%
Kernel CPU:0.00397006%
User CPU:0.00238204%
CPU cycles:96,582/sec
Memory:792 KB
TrustedInstaller.exe (main module)
Total CPU:0.00158726%
Kernel CPU:0.00119044%
User CPU:0.00039681%
CPU cycles:30,205/sec
Memory:48 KB
ntdll.dll
Total CPU:0.00079596%
Kernel CPU:0.00079596%
User CPU:0.00000000%
CPU cycles:9,687/sec
Memory:1.16 MB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 34.50%
Windows 8.1 17.50%
Windows 7 Ultimate 13.50%
Windows 8.1 Pro 7.50%
Windows 7 Professional 6.00%
Windows 8 3.50%
Windows 8.1 Single Language 3.50%
Windows 8 Pro 3.50%
Windows 8.1 Pro with Media Center 2.50%
Windows 8 Single Language 2.50%
Windows 7 Home Basic 2.00%
Windows 8 Enterprise N 1.00%
Windows 8.1 N 0.50%
Windows Seven Black Edition 0.50%
Windows 8.1 Enterprise Evaluation 0.50%
Windows Vista Home Premium 0.50%
Windows 8 Enterprise 0.50%

Distribution by countryDistribution by country

United States installs about 43.72% of Windows Modules Installer.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
ASUS 19.85%
Dell 17.56%
Hewlett-Packard 17.18%
Acer 12.98%
Toshiba 11.45%
Lenovo 8.40%
Sony 5.34%
Intel 3.05%
Samsung 1.53%
GIGABYTE 1.53%
Alienware 1.15%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE