Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.3.9600.16384 (winblue_rtm.130821-1623) 1.84%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.09%
6.3.9600.16384 (winblue_rtm.130821-1623) 2.62%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.28%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.05%
6.2.9200.16384 (win8_rtm.120725-1247) 2.02%
6.2.9200.16384 (win8_rtm.120725-1247) 8.56%
6.2.9200.16384 (win8_rtm.120725-1247) 5.47%
6.2.9200.16384 (win8_rtm.120725-1247) 0.37%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.09%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.09%
6.2.8250.0 (winmain_win8beta.120217-1520) 0.05%
6.2.8102.0 (winmain_win8m3.110823-1455) 0.09%
6.1.7600.16385 (win7_rtm.090713-1255) 5.80%
6.1.7600.16385 (win7_rtm.090713-1255) 40.94%
6.1.7600.16385 (win7_rtm.090713-1255) 19.46%
6.1.7600.16385 (win7_rtm.090713-1255) 3.73%
6.1.7600.16385 (win7_rtm.090713-1255) 0.05%
6.1.7600.16384 (win7_rtm.090710-1945) 0.05%
6.0.6001.18000 (longhorn_rtm.080118-1840) 6.07%
6.0.6001.18000 (longhorn_rtm.080118-1840) 0.05%
6.0.6001.18000 (longhorn_rtm.080118-1840) 1.43%
6.0.6001.18000 (longhorn_rtm.080118-1840) 0.55%
6.0.6000.16386 (vista_rtm.061101-2205) 0.09%
6.0.6000.16386 (vista_rtm.061101-2205) 0.18%

Relationships

PE structurePE file structure
Show functions
Import table
advapi32.dll
SetServiceStatus, RegCloseKey, RegOpenKeyExW, RegisterServiceCtrlHandlerExW, StartServiceCtrlDispatcherW, OpenProcessToken, RegOpenKeyW, RegCreateKeyExW, RegDeleteKeyW, CloseServiceHandle, InitiateShutdownW, LookupPrivilegeValueW, AdjustTokenPrivileges, ChangeServiceConfigW, QueryServiceConfigW, OpenSCManagerW, OpenServiceW, RegQueryValueExW, RegEnumValueW, TraceMessage, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, CreateRestrictedToken, ConvertStringSidToSidW, CreateProcessAsUserW, RegSetValueExW, FreeSid, CheckTokenMembership, AllocateAndInitializeSid, OpenThreadToken, ImpersonateSelf, RevertToSelf, I_ScRegisterPreshutdownRestart
kernel32.dll
LoadLibraryW, GetSystemDirectoryW, GetTickCount, QueryPerformanceCounter, CreateDirectoryW, ExpandEnvironmentStringsW, GetFullPathNameW, GetFileAttributesExW, GetProcAddress, GetFileAttributesW, GetVersionExW, lstrlenW, GetEnvironmentVariableW, GetSystemTime, MoveFileExW, GetWindowsDirectoryW, CreateProcessW, CreateFileW, SetFileTime, GetExitCodeProcess, FindFirstFileW, CompareFileTime, FindNextFileW, DeleteFileW, FindClose, OutputDebugStringA, UnhandledExceptionFilter, TerminateProcess, GetModuleHandleA, SetUnhandledExceptionFilter, InterlockedCompareExchange, Sleep, GetSystemTimeAsFileTime, GetCurrentProcessId, FreeLibrary, GetCurrentProcess, GetModuleFileNameW, InterlockedDecrement, InterlockedIncrement, LeaveCriticalSection, TryEnterCriticalSection, EnterCriticalSection, InitializeCriticalSection, lstrcmpW, ExitProcess, HeapSetInformation, CreateEventW, GetLastError, CreateThread, WaitForMultipleObjects, TerminateThread, WaitForSingleObject, GetExitCodeThread, CloseHandle, SetEvent, InterlockedExchange, GetCurrentThreadId, LocalFree, GetCurrentThread, GetTempPathW, DeleteCriticalSection, FileTimeToSystemTime, FileTimeToLocalFileTime
msvcrt.dll
DllMain
ntdll.dll
NtQuerySystemInformation
ole32.dll
CoDisconnectContext, CoRevokeClassObject, CoSuspendClassObjects, CoCreateInstance, CoRegisterClassObject, CoInitializeSecurity, CoInitializeEx, CoGetMalloc, CoUninitialize, CoResumeClassObjects, CoRevertToSelf, CoImpersonateClient, CoGetCallContext, CoGetClassObject, CoGetInterfaceAndReleaseStream, CoMarshalInterThreadInterfaceInStream, CoTaskMemFree
user32.dll
GetSystemMetrics

trustedinstaller.exe

Windows Modules Installer by Microsoft

Remove trustedinstaller.exe
Version:   6.2.9200.16384 (win8_rtm.120725-1247)
MD5:   8abbb5ce0c62e0a6d28f32f44b7f865c
SHA1:   79d6fde7e23d412f693a78ba29f1f5ee8a4b8f1a
SHA256:   4c78fe2a4a25a758d5191c4edb2a6fe691ff82e7c16c0f146dc96dad87d4f64e
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is trustedinstaller.exe?

The Windows Modules Installer (trusted Installer) enables installation, modification, and removal of Windows updates and optional components.

Overview

trustedinstaller.exe runs as a service under the name Instalador de Módulos do Windows (TrustedInstaller) with extensive SYSTEM privileges (full administrator access). This version is installed on Windows 8 and is compiled as a 64 bit program.

DetailsDetails

File name:trustedinstaller.exe
Publisher:Microsoft Corporation
Product name:Windows Modules Installer
Description:Microsoft® Windows® Operating System
Typical file path:C:\windows\servicing\trustedinstaller.exe
Original name:TrustedInstaller.exe.mui
File version:6.2.9200.16384 (win8_rtm.120725-1247)
Product version:6.2.9200.16384
Size:96 KB (98,304 bytes)
Build date:5/16/2013 12:23 AM
Digital DNA
PE subsystem:Windows GUI
Entropy:6.353177
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'TrustedInstaller'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.10412610%
0.028634%
Kernel CPU:0.04869329%
0.013761%
User CPU:0.05543281%
0.014873%
Kernel CPU time:131,782 ms/min
100,923,805ms/min
Context switches:718/sec
284/sec
Memory
Private memory:2.75 MB
21.59 MB
Private (maximum):5.37 MB
Private (minimum):4.21 MB
Non-paged memory:2.75 MB
21.59 MB
Virtual memory:51.5 MB
140.96 MB
Virtual memory (peak):73.23 MB
169.69 MB
Working set:4.16 MB
18.61 MB
Working set (peak):25.86 MB
37.95 MB
Page faults:48,565/min
2,039/min
Resource allocations
Threads:5
12
Handles:110
600

BehaviorsProcess properties

Integrety level:Undefined
Platform:64-bit
Command line:C:\windows\servicing\trustedinstaller.exe
Owner:SYSTEM
Windows Service
Service name:TrustedInstaller
Display name:Instalador de Módulos do Windows
Description:“Proporciona instalação, modificação e remoção de atualizações e de componentes opcionais do Windows. Se esse serviço for desativado, a instalação e desinstalação de atualizações do Windows podem falhar no computador.”
Type:Win32OwnProcess
Parent process:services.exe (by Microsoft)

ResourcesThreads

Averages
 
ntdll.dll
Total CPU:0.01970686%
0.272967%
Kernel CPU:0.00742059%
0.107585%
User CPU:0.01228627%
0.165382%
CPU cycles:133,923/sec
5,741,424/sec
Context switches:1/sec
79/sec
Memory:1.75 MB
1.16 MB
sechost.dll
Total CPU:0.01104738%
Kernel CPU:0.00223221%
User CPU:0.00881517%
CPU cycles:315,501/sec
Context switches:85/sec
Memory:288 KB
TrustedInstaller.exe (main module)
Total CPU:0.01026118%
Kernel CPU:0.01026118%
User CPU:0.00000000%
CPU cycles:163,061/sec
Memory:112 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 34.50%
Windows 8.1 17.50%
Windows 7 Ultimate 13.50%
Windows 8.1 Pro 7.50%
Windows 7 Professional 6.00%
Windows 8 3.50%
Windows 8.1 Single Language 3.50%
Windows 8 Pro 3.50%
Windows 8.1 Pro with Media Center 2.50%
Windows 8 Single Language 2.50%
Windows 7 Home Basic 2.00%
Windows 8 Enterprise N 1.00%
Windows 8.1 N 0.50%
Windows Seven Black Edition 0.50%
Windows 8.1 Enterprise Evaluation 0.50%
Windows Vista Home Premium 0.50%
Windows 8 Enterprise 0.50%

Distribution by countryDistribution by country

United States installs about 43.72% of Windows Modules Installer.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
ASUS 19.85%
Dell 17.56%
Hewlett-Packard 17.18%
Acer 12.98%
Toshiba 11.45%
Lenovo 8.40%
Sony 5.34%
Intel 3.05%
Samsung 1.53%
GIGABYTE 1.53%
Alienware 1.15%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE