Gridinsoft Logo
File Icon

The MSIInstaller.exe File Analysis

Updated 3 months ago
Checked by Malaware Check
MSIInstaller.exe

Technical Analysis

File Name MSIInstaller.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Scanner Version 1.0.210.174
Database Version 2025-03-08 20:00:40 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
574,992
File Size (bytes)
2025-03-08
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
be8e624fd5b29046ff1c5ddebc8007e5
SHA1
75bdc77b76a57fbebf2e93ddf0b99dc484839729
SHA256
ff7b8578421c05efb880c13c387852902f09c6d1432593772b275805fc0aa83d
SHA512
62e86aef42c1ecfe4d86e66173d86ecab55cf0a5762317b05765580eb8654e18c923c97fcf763ef251a0a9b6734d6c76f046f34a90982219949a8b8855a26854
ImpHash
77b2e5e9b52fbef7638f64ab65f0c58c

PE Analysis

Basic Information

▼
Icon
Hash: 6c394c3ef1e28fec471d6abc1a9d830f
Fuzzy: 6e842d8ec7f3066b577b262f6e8c3fb9
dHash: f0c48e96968edcf0
Image Base 0x00400000
Entry Point 0x004f9c20
Compilation Time 2010-04-16 07:47:33
Checksum 0x00094319 (Actual: 0x00094319)
OS Version 5.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Digital Signature OK
Imports 16 libraries
Exports 0 functions
Resources 25 Resources
Sections 3 Sections

Version Information

▼
FileDescription
FileVersion 3, 3, 6, 1
CompiledScript AutoIt v3 Script: 3, 3, 6, 1
Translation 0x0809 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
UPX0 0x00001000 749,568 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
UPX1 0x000b8000 270,336 bytes 269,824 bytes 7.93 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE E373A5EB62E46B7E9C63AB6798B90571
.rsrc 0x000fa000 299,008 bytes 297,472 bytes 5.31 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D85F22450B40F29C317E9264F9D3CA6B
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 25 (303,674 bytes)
Resource Type Count Total Size Percentage
RT_ICON 10 293,648 bytes
96.7%
RT_MENU 1 80 bytes
0%
RT_DIALOG 1 252 bytes
0.1%
RT_STRING 7 8,498 bytes
2.8%
RT_GROUP_ICON 4 164 bytes
0.1%
RT_VERSION 1 412 bytes
0.1%
RT_MANIFEST 1 620 bytes
0.2%

Certificate Chain Analysis

▼
Certificate Information
File Version 3, 3, 6, 1
Signing Date 08:45 AM 06/13/2011 (5108 days ago)
Verification Status Signed
Signers COREL TW CORP.; VeriSign Class 3 Code Signing 2010 CA; VeriSign
Counter Signers VeriSign Time Stamping Services Signer - G2; VeriSign Time Stamping Services CA; Thawte Timestamping CA
Certificate Chain Summary
VeriSign Time Stamping Services Signer - G2 #1 Primary
Validity Period: 2007-06-15 00:00:00 → 2012-06-14 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 38 25 D7 FA F8 61 AF 9E F4 90 E7 26 B5 D6 5A D5
VeriSign Time Stamping Services CA #2 Chain
Validity Period: 2003-12-04 00:00:00 → 2013-12-03 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 47 BF 19 95 DF 8D 52 46 43 F7 DB 6D 48 0D 31 A4
COREL TW CORP. #3 Chain
Validity Period: 2010-11-14 00:00:00 → 2013-11-13 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 60 99 89 6A 7B 02 79 18 CF DB 65 7C 17 E6 E5 36

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware