Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.3.9600.16384 (winblue_rtm.130821-1623) 1.84%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.09%
6.3.9600.16384 (winblue_rtm.130821-1623) 2.62%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.28%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.05%
6.2.9200.16384 (win8_rtm.120725-1247) 2.02%
6.2.9200.16384 (win8_rtm.120725-1247) 8.56%
6.2.9200.16384 (win8_rtm.120725-1247) 5.47%
6.2.9200.16384 (win8_rtm.120725-1247) 0.37%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.09%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.09%
6.2.8250.0 (winmain_win8beta.120217-1520) 0.05%
6.2.8102.0 (winmain_win8m3.110823-1455) 0.09%
6.1.7600.16385 (win7_rtm.090713-1255) 5.80%
6.1.7600.16385 (win7_rtm.090713-1255) 40.94%
6.1.7600.16385 (win7_rtm.090713-1255) 19.46%
6.1.7600.16385 (win7_rtm.090713-1255) 3.73%
6.1.7600.16385 (win7_rtm.090713-1255) 0.05%
6.1.7600.16384 (win7_rtm.090710-1945) 0.05%
6.0.6001.18000 (longhorn_rtm.080118-1840) 6.07%
6.0.6001.18000 (longhorn_rtm.080118-1840) 0.05%
6.0.6001.18000 (longhorn_rtm.080118-1840) 1.43%
6.0.6001.18000 (longhorn_rtm.080118-1840) 0.55%
6.0.6000.16386 (vista_rtm.061101-2205) 0.09%
6.0.6000.16386 (vista_rtm.061101-2205) 0.18%

Relationships

Parent process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
SetServiceStatus, RegCloseKey, RegOpenKeyExW, RegisterServiceCtrlHandlerExW, StartServiceCtrlDispatcherW, OpenProcessToken, RegOpenKeyW, RegCreateKeyExW, RegDeleteKeyW, CloseServiceHandle, InitiateShutdownW, LookupPrivilegeValueW, AdjustTokenPrivileges, ChangeServiceConfigW, QueryServiceConfigW, OpenSCManagerW, OpenServiceW, RegQueryValueExW, RegEnumValueW, TraceMessage, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, CreateRestrictedToken, ConvertStringSidToSidW, CreateProcessAsUserW, RegSetValueExW, FreeSid, CheckTokenMembership, AllocateAndInitializeSid, OpenThreadToken, ImpersonateSelf, RevertToSelf, I_ScRegisterPreshutdownRestart
kernel32.dll
LoadLibraryW, GetSystemDirectoryW, GetTickCount, QueryPerformanceCounter, CreateDirectoryW, ExpandEnvironmentStringsW, GetFullPathNameW, GetFileAttributesExW, GetProcAddress, GetFileAttributesW, GetVersionExW, lstrlenW, GetEnvironmentVariableW, GetSystemTime, MoveFileExW, GetWindowsDirectoryW, CreateProcessW, CreateFileW, SetFileTime, GetExitCodeProcess, FindFirstFileW, CompareFileTime, FindNextFileW, DeleteFileW, FindClose, OutputDebugStringA, UnhandledExceptionFilter, TerminateProcess, GetModuleHandleA, SetUnhandledExceptionFilter, InterlockedCompareExchange, Sleep, GetSystemTimeAsFileTime, GetCurrentProcessId, FreeLibrary, GetCurrentProcess, GetModuleFileNameW, InterlockedDecrement, InterlockedIncrement, LeaveCriticalSection, TryEnterCriticalSection, EnterCriticalSection, InitializeCriticalSection, lstrcmpW, ExitProcess, HeapSetInformation, CreateEventW, GetLastError, CreateThread, WaitForMultipleObjects, TerminateThread, WaitForSingleObject, GetExitCodeThread, CloseHandle, SetEvent, InterlockedExchange, GetCurrentThreadId, LocalFree, GetCurrentThread, GetTempPathW, DeleteCriticalSection, FileTimeToSystemTime, FileTimeToLocalFileTime
msvcrt.dll
DllMain
ntdll.dll
NtQuerySystemInformation
ole32.dll
CoDisconnectContext, CoRevokeClassObject, CoSuspendClassObjects, CoCreateInstance, CoRegisterClassObject, CoInitializeSecurity, CoInitializeEx, CoGetMalloc, CoUninitialize, CoResumeClassObjects, CoRevertToSelf, CoImpersonateClient, CoGetCallContext, CoGetClassObject, CoGetInterfaceAndReleaseStream, CoMarshalInterThreadInterfaceInStream, CoTaskMemFree
user32.dll
GetSystemMetrics

trustedinstaller.exe

Windows Modules Installer by Microsoft

Remove trustedinstaller.exe
Version:   6.0.6001.18000 (longhorn_rtm.080118-1840)
MD5:   66328b08ef5a9305d8ede36b93930369
SHA1:   3a597f5aee11211d13c4108d80a082a3b4984d86
SHA256:   fd8136bf15ab8d2db15d011c4f813737d68eed1178462db8ce40606c16185a30
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is trustedinstaller.exe?

The Windows Modules Installer (trusted Installer) enables installation, modification, and removal of Windows updates and optional components.

Overview

trustedinstaller.exe runs as a service under the name Instalador de Módulos do Windows (TrustedInstaller) with extensive SYSTEM privileges (full administrator access). and is compiled as a 64 bit program.

DetailsDetails

File name:trustedinstaller.exe
Publisher:Microsoft Corporation
Product name:Windows Modules Installer
Description:Microsoft® Windows® Operating System
Typical file path:C:\windows\servicing\trustedinstaller.exe
Original name:TrustedInstaller.exe.mui
File version:6.0.6001.18000 (longhorn_rtm.080118-1840)
Product version:6.0.6001.18000
Size:41.5 KB (42,496 bytes)
Digital DNA
PE subsystem:Windows GUI
Entropy:6.353177
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'TrustedInstaller'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00061127%
0.028634%
Kernel CPU:0.00049531%
0.013761%
User CPU:0.00011595%
0.014873%
Kernel CPU time:3,388,107,719 ms/min
100,923,805ms/min
Memory
Private memory:63.04 MB
21.59 MB
Private (maximum):71.77 MB
Private (minimum):26.27 MB
Non-paged memory:63.04 MB
21.59 MB
Virtual memory:208.59 MB
140.96 MB
Virtual memory (peak):245.11 MB
169.69 MB
Working set:71.71 MB
18.61 MB
Working set (peak):132.23 MB
37.95 MB
Resource allocations
Threads:6
12
Handles:261
600

BehaviorsProcess properties

Platform:64-bit
Command line:C:\windows\servicing\trustedinstaller.exe
Owner:SYSTEM
Windows Service
Service name:TrustedInstaller
Display name:Instalador de Módulos do Windows
Description:“Proporciona instalação, modificação e remoção de atualizações e de componentes opcionais do Windows. Se esse serviço for desativado, a instalação e desinstalação de atualizações do Windows podem falhar no computador.”
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 34.50%
Windows 8.1 17.50%
Windows 7 Ultimate 13.50%
Windows 8.1 Pro 7.50%
Windows 7 Professional 6.00%
Windows 8 3.50%
Windows 8.1 Single Language 3.50%
Windows 8 Pro 3.50%
Windows 8.1 Pro with Media Center 2.50%
Windows 8 Single Language 2.50%
Windows 7 Home Basic 2.00%
Windows 8 Enterprise N 1.00%
Windows 8.1 N 0.50%
Windows Seven Black Edition 0.50%
Windows 8.1 Enterprise Evaluation 0.50%
Windows Vista Home Premium 0.50%
Windows 8 Enterprise 0.50%

Distribution by countryDistribution by country

United States installs about 43.72% of Windows Modules Installer.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
ASUS 19.85%
Dell 17.56%
Hewlett-Packard 17.18%
Acer 12.98%
Toshiba 11.45%
Lenovo 8.40%
Sony 5.34%
Intel 3.05%
Samsung 1.53%
GIGABYTE 1.53%
Alienware 1.15%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE