msi.dll

  • File Path: C:\Windows\SysWOW64\msi.dll
  • Description: Windows Installer

Hashes

Type Hash
MD5 D11A09B6FD18EF32AE55EB449DF96855
SHA1 2154AFA0B8D1C40DCC7C3382317519D9F41FC70C
SHA256 CFEAD07A171D41E43A694350B134C141E61F8E3FCD7972A9989B6A0375363178
SHA384 9FD982D814F8E3552E9E249D0A1E5C9357F5E55B3471BC8BF4E93EDF3BEDFC485842EE94E6C81B2F3C8B13CC756684A4
SHA512 BF92DADF866EB51A2D8FF854B407352E65E78E265D1FD0D2512FCBC869CD067FA845B7043BDBE298FD4B199AD9ECAA04BDF69940E4792194E9B93990FEB8A337
SSDEEP 49152:vREB/CvY5LfkrZdDtxNtwLASWDy1irDnrvkOviPegy:vRg9srZltxfwOD+ivr8pPm
IMP 303098148F62EFECD410B41D54D6686D
PESHA1 26B6E707E318C28ACE9094D5644ECB1EEEA6E04E
PE256 CC234C5B47766402AE498594D61AC0602AE3A132F10CF2D7982F65C34BA8F36B

DLL Exports:

Function Name Ordinal Type
MsiProvideQualifiedComponentExW 203 Exported Function
MsiProvideQualifiedComponentW 109 Exported Function
MsiProvideQualifiedComponentA 108 Exported Function
MsiProvideQualifiedComponentExA 202 Exported Function
MsiQueryComponentStateA 249 Exported Function
MsiQueryFeatureStateExA 251 Exported Function
MsiQueryFeatureStateExW 252 Exported Function
MsiQueryComponentStateW 250 Exported Function
MsiQueryFeatureStateA 110 Exported Function
MsiProcessMessage 103 Exported Function
MsiProvideAssemblyA 225 Exported Function
MsiProcessAdvertiseScriptA 101 Exported Function
MsiProcessAdvertiseScriptW 102 Exported Function
MsiProvideAssemblyW 226 Exported Function
MsiProvideComponentFromDescriptorW 106 Exported Function
MsiProvideComponentW 107 Exported Function
MsiProvideComponentA 104 Exported Function
MsiProvideComponentFromDescriptorA 105 Exported Function
MsiRecordIsNull 119 Exported Function
MsiRecordReadStream 120 Exported Function
MsiRecordGetStringA 117 Exported Function
MsiRecordGetStringW 118 Exported Function
MsiRecordSetInteger 121 Exported Function
MsiRecordSetStringA 124 Exported Function
MsiRecordSetStringW 125 Exported Function
MsiRecordSetStreamA 122 Exported Function
MsiRecordSetStreamW 123 Exported Function
MsiQueryFeatureStateW 111 Exported Function
MsiQueryProductStateA 112 Exported Function
MsiQueryFeatureStateFromDescriptorA 187 Exported Function
MsiQueryFeatureStateFromDescriptorW 188 Exported Function
MsiQueryProductStateW 113 Exported Function
MsiRecordGetFieldCount 115 Exported Function
MsiRecordGetInteger 116 Exported Function
MsiRecordClearData 167 Exported Function
MsiRecordDataSize 114 Exported Function
MsiPreviewDialogW 100 Exported Function
MsiInvalidateFeatureCache 191 Exported Function
MsiIsProductElevatedA 214 Exported Function
MsiInstallProductA 87 Exported Function
MsiInstallProductW 88 Exported Function
MsiIsProductElevatedW 215 Exported Function
MsiLoadStringW 197 Exported Function
MsiLocateComponentA 89 Exported Function
MsiJoinTransaction 287 Exported Function
MsiLoadStringA 196 Exported Function
MsiGetTargetPathW 80 Exported Function
MsiGetUserInfoA 81 Exported Function
MsiGetSummaryInformationW 78 Exported Function
MsiGetTargetPathA 79 Exported Function
MsiGetUserInfoW 82 Exported Function
MsiInstallMissingFileA 85 Exported Function
MsiInstallMissingFileW 86 Exported Function
MsiInstallMissingComponentA 83 Exported Function
MsiInstallMissingComponentW 84 Exported Function
MsiOpenPackageExW 232 Exported Function
MsiOpenPackageW 94 Exported Function
MsiOpenPackageA 93 Exported Function
MsiOpenPackageExA 231 Exported Function
MsiOpenProductA 95 Exported Function
MsiPreviewBillboardW 98 Exported Function
MsiPreviewDialogA 99 Exported Function
MsiOpenProductW 96 Exported Function
MsiPreviewBillboardA 97 Exported Function
MsiMessageBoxExA 279 Exported Function
MsiMessageBoxExW 280 Exported Function
MsiLocateComponentW 90 Exported Function
MsiMessageBoxA 198 Exported Function
MsiMessageBoxW 199 Exported Function
MsiOpenDatabaseA 91 Exported Function
MsiOpenDatabaseW 92 Exported Function
MsiNotifySidChangeA 229 Exported Function
MsiNotifySidChangeW 230 Exported Function
MsiReinstallFeatureA 126 Exported Function
MsiSourceListGetInfoA 265 Exported Function
MsiSourceListGetInfoW 266 Exported Function
MsiSourceListForceResolutionExW 262 Exported Function
MsiSourceListForceResolutionW 213 Exported Function
MsiSourceListSetInfoA 267 Exported Function
MsiSummaryInfoGetPropertyCount 149 Exported Function
MsiSummaryInfoGetPropertyW 150 Exported Function
MsiSourceListSetInfoW 268 Exported Function
MsiSummaryInfoGetPropertyA 148 Exported Function
MsiSourceListClearSourceW 258 Exported Function
MsiSourceListEnumMediaDisksA 271 Exported Function
MsiSourceListClearMediaDiskW 276 Exported Function
MsiSourceListClearSourceA 257 Exported Function
MsiSourceListEnumMediaDisksW 272 Exported Function
MsiSourceListForceResolutionA 212 Exported Function
MsiSourceListForceResolutionExA 261 Exported Function
MsiSourceListEnumSourcesA 263 Exported Function
MsiSourceListEnumSourcesW 264 Exported Function
MsiViewExecute 159 Exported Function
MsiViewFetch 160 Exported Function
MsiVerifyPackageW 157 Exported Function
MsiViewClose 158 Exported Function
MsiViewGetColumnInfo 166 Exported Function
MsiViewModify 163 Exported Function
QueryInstanceCount 295 Exported Function
MsiViewGetErrorA 161 Exported Function
MsiViewGetErrorW 162 Exported Function
MsiSummaryInfoSetPropertyW 153 Exported Function
MsiUseFeatureA 154 Exported Function
MsiSummaryInfoPersist 151 Exported Function
MsiSummaryInfoSetPropertyA 152 Exported Function
MsiUseFeatureExA 192 Exported Function
MsiVerifyDiskSpace 142 Exported Function
MsiVerifyPackageA 156 Exported Function
MsiUseFeatureExW 193 Exported Function
MsiUseFeatureW 155 Exported Function
MsiSourceListClearMediaDiskA 275 Exported Function
MsiSetExternalUIA 136 Exported Function
MsiSetExternalUIRecord 281 Exported Function
MsiSetComponentStateA 134 Exported Function
MsiSetComponentStateW 135 Exported Function
MsiSetExternalUIW 137 Exported Function
MsiSetFeatureStateA 138 Exported Function
MsiSetFeatureStateW 139 Exported Function
MsiSetFeatureAttributesA 206 Exported Function
MsiSetFeatureAttributesW 207 Exported Function
MsiReinstallFeatureW 129 Exported Function
MsiReinstallProductA 130 Exported Function
MsiReinstallFeatureFromDescriptorA 127 Exported Function
MsiReinstallFeatureFromDescriptorW 128 Exported Function
MsiReinstallProductW 131 Exported Function
MsiSequenceA 132 Exported Function
MsiSequenceW 133 Exported Function
MsiRemovePatchesA 237 Exported Function
MsiRemovePatchesW 238 Exported Function
MsiSourceListAddSourceExA 255 Exported Function
MsiSourceListAddSourceExW 256 Exported Function
MsiSourceListAddMediaDiskW 274 Exported Function
MsiSourceListAddSourceA 210 Exported Function
MsiSourceListAddSourceW 211 Exported Function
MsiSourceListClearAllExW 260 Exported Function
MsiSourceListClearAllW 209 Exported Function
MsiSourceListClearAllA 208 Exported Function
MsiSourceListClearAllExA 259 Exported Function
MsiSetMode 143 Exported Function
MsiSetOfflineContextW 288 Exported Function
MsiSetInstallLevel 140 Exported Function
MsiSetInternalUI 141 Exported Function
MsiSetPropertyA 144 Exported Function
MsiSetTargetPathW 147 Exported Function
MsiSourceListAddMediaDiskA 273 Exported Function
MsiSetPropertyW 145 Exported Function
MsiSetTargetPathA 146 Exported Function
MsiGetSummaryInformationA 77 Exported Function
MsiDatabaseMergeA 29 Exported Function
MsiDatabaseMergeW 30 Exported Function
MsiDatabaseIsTablePersistentA 164 Exported Function
MsiDatabaseIsTablePersistentW 165 Exported Function
MsiDatabaseOpenViewA 31 Exported Function
MsiDecomposeDescriptorW 201 Exported Function
MsiDeleteUserDataA 233 Exported Function
MsiDatabaseOpenViewW 32 Exported Function
MsiDecomposeDescriptorA 200 Exported Function
MsiDatabaseExportW 22 Exported Function
MsiDatabaseGenerateTransformA 23 Exported Function
MsiDatabaseCommit 20 Exported Function
MsiDatabaseExportA 21 Exported Function
MsiDatabaseGenerateTransformW 24 Exported Function
MsiDatabaseImportA 27 Exported Function
MsiDatabaseImportW 28 Exported Function
MsiDatabaseGetPrimaryKeysA 25 Exported Function
MsiDatabaseGetPrimaryKeysW 26 Exported Function
MsiEnumClientsA 36 Exported Function
MsiEnumClientsExA 291 Exported Function
MsiEnableUIPreview 35 Exported Function
MsiEndTransaction 286 Exported Function
MsiEnumClientsExW 292 Exported Function
MsiEnumComponentCostsW 221 Exported Function
MsiEnumComponentQualifiersA 38 Exported Function
MsiEnumClientsW 37 Exported Function
MsiEnumComponentCostsA 220 Exported Function
MsiDetermineApplicablePatchesW 278 Exported Function
MsiDeterminePatchSequenceA 253 Exported Function
MsiDeleteUserDataW 234 Exported Function
MsiDetermineApplicablePatchesA 277 Exported Function
MsiDeterminePatchSequenceW 254 Exported Function
MsiEnableLogA 168 Exported Function
MsiEnableLogW 169 Exported Function
MsiDoActionA 33 Exported Function
MsiDoActionW 34 Exported Function
MsiDatabaseApplyTransformW 19 Exported Function
MsiAdvertiseScriptA 176 Exported Function
MsiAdvertiseScriptW 177 Exported Function
MsiAdvertiseProductExW 228 Exported Function
MsiAdvertiseProductW 6 Exported Function
MsiApplyMultiplePatchesA 239 Exported Function
MsiApplyPatchW 175 Exported Function
MsiBeginTransactionA 284 Exported Function
MsiApplyMultiplePatchesW 240 Exported Function
MsiApplyPatchA 174 Exported Function
DllGetVersion 182 Exported Function
DllRegisterServer 298 Exported Function
DllCanUnloadNow 296 Exported Function
DllGetClassObject 297 Exported Function
DllUnregisterServer 299 Exported Function
MsiAdvertiseProductA 5 Exported Function
MsiAdvertiseProductExA 227 Exported Function
Migrate10CachedPackagesA 235 Exported Function
Migrate10CachedPackagesW 236 Exported Function
MsiConfigureProductExW 190 Exported Function
MsiConfigureProductW 16 Exported Function
MsiConfigureProductA 15 Exported Function
MsiConfigureProductExA 189 Exported Function
MsiCreateAndVerifyInstallerDirectory 222 Exported Function
MsiCreateTransformSummaryInfoW 186 Exported Function
MsiDatabaseApplyTransformA 18 Exported Function
MsiCreateRecord 17 Exported Function
MsiCreateTransformSummaryInfoA 185 Exported Function
MsiCloseHandle 8 Exported Function
MsiCollectUserInfoA 9 Exported Function
MsiBeginTransactionW 285 Exported Function
MsiCloseAllHandles 7 Exported Function
MsiCollectUserInfoW 10 Exported Function
MsiConfigureFeatureFromDescriptorW 13 Exported Function
MsiConfigureFeatureW 14 Exported Function
MsiConfigureFeatureA 11 Exported Function
MsiConfigureFeatureFromDescriptorA 12 Exported Function
MsiEnumComponentQualifiersW 39 Exported Function
MsiGetMode 64 Exported Function
MsiGetPatchFileListA 282 Exported Function
MsiGetLanguage 63 Exported Function
MsiGetLastErrorRecord 48 Exported Function
MsiGetPatchFileListW 283 Exported Function
MsiGetPatchInfoExW 244 Exported Function
MsiGetPatchInfoW 179 Exported Function
MsiGetPatchInfoA 178 Exported Function
MsiGetPatchInfoExA 243 Exported Function
MsiGetFeatureValidStatesW 62 Exported Function
MsiGetFileHashA 218 Exported Function
MsiGetFeatureUsageW 60 Exported Function
MsiGetFeatureValidStatesA 61 Exported Function
MsiGetFileHashW 219 Exported Function
MsiGetFileVersionA 194 Exported Function
MsiGetFileVersionW 195 Exported Function
MsiGetFileSignatureInformationA 223 Exported Function
MsiGetFileSignatureInformationW 224 Exported Function
MsiGetProductPropertyW 72 Exported Function
MsiGetPropertyA 73 Exported Function
MsiGetProductInfoW 70 Exported Function
MsiGetProductPropertyA 71 Exported Function
MsiGetPropertyW 74 Exported Function
MsiGetSourcePathA 75 Exported Function
MsiGetSourcePathW 76 Exported Function
MsiGetShortcutTargetA 216 Exported Function
MsiGetShortcutTargetW 217 Exported Function
MsiGetProductCodeFromPackageCodeW 184 Exported Function
MsiGetProductCodeW 66 Exported Function
MsiGetProductCodeA 65 Exported Function
MsiGetProductCodeFromPackageCodeA 183 Exported Function
MsiGetProductInfoA 67 Exported Function
MsiGetProductInfoFromScriptA 68 Exported Function
MsiGetProductInfoFromScriptW 69 Exported Function
MsiGetProductInfoExA 247 Exported Function
MsiGetProductInfoExW 248 Exported Function
MsiGetFeatureUsageA 59 Exported Function
MsiEnumProductsExA 245 Exported Function
MsiEnumProductsExW 246 Exported Function
MsiEnumPatchesW 181 Exported Function
MsiEnumProductsA 44 Exported Function
MsiEnumProductsW 45 Exported Function
MsiEvaluateConditionA 46 Exported Function
MsiEvaluateConditionW 47 Exported Function
MsiEnumRelatedProductsA 204 Exported Function
MsiEnumRelatedProductsW 205 Exported Function
MsiEnumComponentsExW 290 Exported Function
MsiEnumComponentsW 41 Exported Function
MsiEnumComponentsA 40 Exported Function
MsiEnumComponentsExA 289 Exported Function
MsiEnumFeaturesA 42 Exported Function
MsiEnumPatchesExA 269 Exported Function
MsiEnumPatchesExW 270 Exported Function
MsiEnumFeaturesW 43 Exported Function
MsiEnumPatchesA 180 Exported Function
MsiGetDatabaseState 52 Exported Function
MsiGetFeatureCostA 53 Exported Function
MsiGetComponentStateA 50 Exported Function
MsiGetComponentStateW 51 Exported Function
MsiGetFeatureCostW 54 Exported Function
MsiGetFeatureStateA 57 Exported Function
MsiGetFeatureStateW 58 Exported Function
MsiGetFeatureInfoA 55 Exported Function
MsiGetFeatureInfoW 56 Exported Function
MsiFormatRecordA 170 Exported Function
MsiFormatRecordW 171 Exported Function
MsiExtractPatchXMLDataA 241 Exported Function
MsiExtractPatchXMLDataW 242 Exported Function
MsiGetActiveDatabase 49 Exported Function
MsiGetComponentPathExW 294 Exported Function
MsiGetComponentPathW 173 Exported Function
MsiGetComponentPathA 172 Exported Function
MsiGetComponentPathExA 293 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: msi.dll
  • Product Name: Windows Installer - Unicode
  • Company Name: Microsoft Corporation
  • File Version: 5.0.19041.508
  • Product Version: 5.0.19041.508
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/cfead07a171d41e43a694350b134c141e61f8e3fcd7972a9989b6a0375363178/detection/

Possible Misuse

The following table contains possible examples of msi.dll being misused. While msi.dll is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
signature-base apt_duqu2.yar $s2 = “MSI.dll” fullword ascii CC BY-NC 4.0
signature-base apt_irontiger.yar $s1 = “msi.dll.urlUT” fullword ascii CC BY-NC 4.0
signature-base apt_kaspersky_duqu2.yar $b1 = “MSI.dll” CC BY-NC 4.0
signature-base apt_kaspersky_duqu2.yar $b2 = “msi.dll” CC BY-NC 4.0
signature-base apt_kaspersky_duqu2.yar $x4 = “MSI.dll” fullword ascii CC BY-NC 4.0
signature-base apt_shellcrew_streamex.yar $x1 = “msi.dll.eng” fullword wide CC BY-NC 4.0
signature-base apt_threatgroup_3390.yar $s6 = “msi.dll.urlUT” fullword ascii CC BY-NC 4.0
signature-base yara_mixed_ext_vars.yar description = “Detetcs very small and supicious msi.dll” CC BY-NC 4.0
signature-base yara_mixed_ext_vars.yar $x1 = “msi.dll.eng” fullword wide CC BY-NC 4.0
signature-base yara_mixed_ext_vars.yar uint16(0) == 0x5a4d and filesize < 15KB and filename == “msi.dll” and $x1 CC BY-NC 4.0

MIT License. Copyright (c) 2020-2021 Strontic.