home

instmsiw.exe

Windows Installer - Unicode

InstallShield Software Corporation

This is a self-extracting archive and installer.
Publisher:
Microsoft Corporation  (signed by InstallShield Software Corporation)

Product:
Windows Installer - Unicode

Description:
Installer for the Windows Installer

Version:
1.20.1827.0

MD5:
23f7d0efd7cd10ee1294a9908a0f5746

SHA-1:
70a786ace2fe3a4b4c2bbf0caef0a7dc65098cee

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 3:13:31 PM UTC  (today)

File size:
1.5 MB (1,612,888 bytes)

Product version:
1.20.1827.0

Copyright:
Copyright (c) Microsoft Corp. 1999

Original file name:
Msi.dll,MsiHnd.dll,MsiExec.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Documents and Settings\{user}\Local settings\temp\{random}.tmp\instmsiw.exe

Digital Signature
Signed by:
InstallShield Software Corporation

Authority:
Thawte Consulting cc

Valid from:
2/3/2003 11:20:12 AM

Valid to:
2/11/2004 4:05:03 PM

Subject:
CN=InstallShield Software Corporation, OU=Research and Development, O=InstallShield Software Corporation, L=Schaumburg, S=Illinois, C=US

Issuer:
E=server-certs@thawte.com, CN=Thawte Server CA, OU=Certification Services Division, O=Thawte Consulting cc, L=Cape Town, S=Western Cape, C=ZA

Serial number:
09F376

File PE Metadata
Compilation timestamp:
10/5/1998 6:12:12 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.12

CTPH (ssdeep):
24576:SI1xNqkXgVIs+ENX0WMRpJiZcE1+YPA8zMga7ShOlVdwle6q8xJ0gl:h1xIIsVZRMRvbE1+YPAgMgvKwleOP

Entry address:
0x273D

Entry point:
87, C9, 20, CC, B6, A1, 0F, BF, D2, 80, F7, 2F, F7, C1, 6A, 89, 52, 3B, C7, C2, A2, DF, 96, 20, 12, FE, FF, CA, 3D, 24, 41, 00, 00, 85, F0, 78, 03, 0F, AF, F6, B0, 8F, F2, 33, C9, 3C, AE, 87, F0, 0F, AF, C3, 80, CA, F9, 20, C2, 81, C1, DE, F6, FF, FF, 2B, EE, 8D, 2D, C0, 65, 8C, C3, 81, C1, 23, 09, 00, 00, 89, FE, 85, D2, 76, 08, 84, FE, 8D, 15, 34, B4, 85, 1C, 0F, AF, C1, 81, F9, 6F, 01, 00, 00, 0F, 82, C3, FF, FF, FF, FE, C8, 1D, AD, 9B, 6C, 36, 0D, DD, FC, DD, 13, C7, C3, 68, 4F, E7, FC, 84, E6, E8, 00...
 
[+]

Entropy:
7.9608  (probably packed)

Code size:
36 KB (36,864 bytes)

Scan instmsiw.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.