Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.3.9600.16384 (winblue_rtm.130821-1623) 1.84%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.09%
6.3.9600.16384 (winblue_rtm.130821-1623) 2.62%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.28%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.05%
6.2.9200.16384 (win8_rtm.120725-1247) 2.02%
6.2.9200.16384 (win8_rtm.120725-1247) 8.56%
6.2.9200.16384 (win8_rtm.120725-1247) 5.47%
6.2.9200.16384 (win8_rtm.120725-1247) 0.37%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.09%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.09%
6.2.8250.0 (winmain_win8beta.120217-1520) 0.05%
6.2.8102.0 (winmain_win8m3.110823-1455) 0.09%
6.1.7600.16385 (win7_rtm.090713-1255) 5.80%
6.1.7600.16385 (win7_rtm.090713-1255) 40.94%
6.1.7600.16385 (win7_rtm.090713-1255) 19.46%
6.1.7600.16385 (win7_rtm.090713-1255) 3.73%
6.1.7600.16385 (win7_rtm.090713-1255) 0.05%
6.1.7600.16384 (win7_rtm.090710-1945) 0.05%
6.0.6001.18000 (longhorn_rtm.080118-1840) 6.07%
6.0.6001.18000 (longhorn_rtm.080118-1840) 0.05%
6.0.6001.18000 (longhorn_rtm.080118-1840) 1.43%
6.0.6001.18000 (longhorn_rtm.080118-1840) 0.55%
6.0.6000.16386 (vista_rtm.061101-2205) 0.09%
6.0.6000.16386 (vista_rtm.061101-2205) 0.18%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
SetServiceStatus, RegCloseKey, RegOpenKeyExW, RegisterServiceCtrlHandlerExW, StartServiceCtrlDispatcherW, OpenProcessToken, RegOpenKeyW, RegCreateKeyExW, RegDeleteKeyW, CloseServiceHandle, InitiateShutdownW, LookupPrivilegeValueW, AdjustTokenPrivileges, ChangeServiceConfigW, QueryServiceConfigW, OpenSCManagerW, OpenServiceW, RegQueryValueExW, RegEnumValueW, TraceMessage, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, CreateRestrictedToken, ConvertStringSidToSidW, CreateProcessAsUserW, RegSetValueExW, FreeSid, CheckTokenMembership, AllocateAndInitializeSid, OpenThreadToken, ImpersonateSelf, RevertToSelf, I_ScRegisterPreshutdownRestart
kernel32.dll
LoadLibraryW, GetSystemDirectoryW, GetTickCount, QueryPerformanceCounter, CreateDirectoryW, ExpandEnvironmentStringsW, GetFullPathNameW, GetFileAttributesExW, GetProcAddress, GetFileAttributesW, GetVersionExW, lstrlenW, GetEnvironmentVariableW, GetSystemTime, MoveFileExW, GetWindowsDirectoryW, CreateProcessW, CreateFileW, SetFileTime, GetExitCodeProcess, FindFirstFileW, CompareFileTime, FindNextFileW, DeleteFileW, FindClose, OutputDebugStringA, UnhandledExceptionFilter, TerminateProcess, GetModuleHandleA, SetUnhandledExceptionFilter, InterlockedCompareExchange, Sleep, GetSystemTimeAsFileTime, GetCurrentProcessId, FreeLibrary, GetCurrentProcess, GetModuleFileNameW, InterlockedDecrement, InterlockedIncrement, LeaveCriticalSection, TryEnterCriticalSection, EnterCriticalSection, InitializeCriticalSection, lstrcmpW, ExitProcess, HeapSetInformation, CreateEventW, GetLastError, CreateThread, WaitForMultipleObjects, TerminateThread, WaitForSingleObject, GetExitCodeThread, CloseHandle, SetEvent, InterlockedExchange, GetCurrentThreadId, LocalFree, GetCurrentThread, GetTempPathW, DeleteCriticalSection, FileTimeToSystemTime, FileTimeToLocalFileTime
msvcrt.dll
DllMain
ntdll.dll
NtQuerySystemInformation
ole32.dll
CoDisconnectContext, CoRevokeClassObject, CoSuspendClassObjects, CoCreateInstance, CoRegisterClassObject, CoInitializeSecurity, CoInitializeEx, CoGetMalloc, CoUninitialize, CoResumeClassObjects, CoRevertToSelf, CoImpersonateClient, CoGetCallContext, CoGetClassObject, CoGetInterfaceAndReleaseStream, CoMarshalInterThreadInterfaceInStream, CoTaskMemFree
user32.dll
GetSystemMetrics

trustedinstaller.exe

Windows Modules Installer by Microsoft

Remove trustedinstaller.exe
Version:   6.1.7600.16384 (win7_rtm.090710-1945)
MD5:   6cfd5a8dd5fb864f96be939429a8de64
SHA1:   0aeb3fbd69acd577bafe2d8bd69de33113aeebdf
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is trustedinstaller.exe?

The Windows Modules Installer (trusted Installer) enables installation, modification, and removal of Windows updates and optional components.

Overview

trustedinstaller.exe runs as a service under the name Instalador de Módulos do Windows (TrustedInstaller) within the local user context. This version is designed to run on Windows 7.

DetailsDetails

File name:trustedinstaller.exe
Publisher:Microsoft Corporation
Product name:Windows Modules Installer
Description:Microsoft® Windows® Operating System
Typical file path:C:\windows\servicing\trustedinstaller.exe
Original name:TrustedInstaller.exe.mui
File version:6.1.7600.16384 (win7_rtm.090710-1945)
Product version:6.1.7600.16384
Size:200 KB (204,800 bytes)
Build date:7/10/2009 11:10 PM
Digital DNA
PE subsystem:Windows GUI
Entropy:6.353177
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'TrustedInstaller'

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 34.50%
Windows 8.1 17.50%
Windows 7 Ultimate 13.50%
Windows 8.1 Pro 7.50%
Windows 7 Professional 6.00%
Windows 8 3.50%
Windows 8.1 Single Language 3.50%
Windows 8 Pro 3.50%
Windows 8.1 Pro with Media Center 2.50%
Windows 8 Single Language 2.50%
Windows 7 Home Basic 2.00%
Windows 8 Enterprise N 1.00%
Windows 8.1 N 0.50%
Windows Seven Black Edition 0.50%
Windows 8.1 Enterprise Evaluation 0.50%
Windows Vista Home Premium 0.50%
Windows 8 Enterprise 0.50%

Distribution by countryDistribution by country

United States installs about 43.72% of Windows Modules Installer.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
ASUS 19.85%
Dell 17.56%
Hewlett-Packard 17.18%
Acer 12.98%
Toshiba 11.45%
Lenovo 8.40%
Sony 5.34%
Intel 3.05%
Samsung 1.53%
GIGABYTE 1.53%
Alienware 1.15%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE