home

MSEInstall.exe

Microsoft Security Client

Microsoft Corporation

The MSEInstall Package is the installer for Microsoft Security Essentials, an anti-virus protection platform. Upon new releases/updates of MSEInstall, Windows Update will download the client and install it. This is a setup and installation application. This is installed with Microsoft Security Essentials Prerelease. The file has been seen being downloaded from download.microsoft.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Security Client

Description:
MSEInstall Package

Version:
4.2.0223.0

MD5:
afeaca55a58f1e17819766c57a28cbca

SHA-1:
8d2f435dd2d12d4097856253102071dc96f522b7

SHA-256:
e0e494a01c80d6efa647433a5c991484784fc92ae6744b88386ad637179c2744

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/26/2024 9:25:18 PM UTC  (today)

File size:
12.9 MB (13,475,464 bytes)

Product version:
4.2.0223.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
MSEInstall.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\mseinstall.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
1/24/2013 5:33:39 PM

Valid to:
4/24/2014 6:33:39 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000B011AF0A8BD03B9FDD0001000000B0

File PE Metadata
Compilation timestamp:
3/13/2009 2:58:56 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
196608:+yC9IZA2e1YhZQDCgw/wVHdMu/FTTAxdYC0eC4nRhBHiDlk7NJVd75Vdj9anbmPE:+bPD1dDCfmKudTsY94nBCRkRH9aFunPG

Entry address:
0x9850

Entry point:
48, 83, EC, 58, 48, 89, 5C, 24, 70, 48, 89, 7C, 24, 78, 66, 81, 3D, 99, 67, FF, FF, 4D, 5A, 74, 08, 33, DB, 89, 5C, 24, 60, EB, 7C, 48, 63, 05, C4, 67, FF, FF, 48, 8D, 0D, 81, 67, FF, FF, 48, 03, C1, 81, 38, 50, 45, 00, 00, 74, 08, 33, DB, 89, 5C, 24, 60, EB, 5B, 0F, B7, 48, 18, 81, F9, 0B, 01, 00, 00, 74, 32, 81, F9, 0B, 02, 00, 00, 74, 08, 33, DB, 89, 5C, 24, 60, EB, 3F, 83, B8, 84, 00, 00, 00, 0E, 77, 08, 33, DB, 89, 5C, 24, 60, EB, 2E, 33, DB, 39, 98, F8, 00, 00, 00, 0F, 95, C3, 89, 5C, 24, 60, EB, 1D...
 
[+]

Entropy:
7.9870  (probably packed)

Code size:
56 KB (57,344 bytes)

The file MSEInstall.exe has been discovered within the following program.

Microsoft Security Essentials Prerelease  by Microsoft Corporation
The Microsoft Security Essentials Prerelease program allows users to run the latest & greatest versions of Security Essentials before they are publicy available.
go.microsoft.com/fwlink/?LinkID=228940&mkt=en-us
1% remove it
 
Powered by Should I Remove It?

The file MSEInstall.exe has been seen being distributed by the following 12 URLs.

http://download.microsoft.com/download/A/3/8/A38FFBF2-1122-48B4-AF60-E44F6DC28BD8/ENUS/.../MSEInstall.exe

https://onedrive.live.com/download.aspx?cid=7E607AD15D4F5BA7&resid=7E607AD15D4F5BA7!182&canary=3lz6POmEgPNIk1LgXcEqd9QFUIbYMf91dMkXpbMG3YA=6&ithint=.exe

http://storage.dobreprogramy.pl/.../mseinstallx64(dobreprogramy.pl).exe

http://files.filepuma.com/files/antivirus/.../Microsoft_Security_Essentials_(64bit)_v4.2.223.0.exe

http://www.filepuma.com/down/1372299973c2728/microsoft_security_essentials_64bit_4.2.223.0/.../0/

http://www.filepuma.com/file/1372299973c2728/microsoft_security_essentials_64bit_4.2.223.0/.../0/

http://inndl.com/download.php?version=24042&domain=microsoft-security-essentials&name=Microsoft Security Essentials&icon=aHR0cDovL3NjcmVlbnNob3RzLmZyLnNmdGNkbi5uZXQvZnIvc2Nybi84MzAwMC84MzYzMC9taWNyb3NvZnQtc2VjdXJpdHktZXNzZW50aWFscy0xLnBuZw==&ss=http://screenshots.fr.sftcdn.net/fr/scrn/83000/.../microsoft-security-essentials-8.png?key=api&url=aHR0cDovL21zZS5kbHNlcnZpY2UubWljcm9zb2Z0LmNvbS9kb3dubG9hZC9GLzMvOS9GMzkyMzIxQi1DMDNELTQ5OEEtQkVCQi0xNDFFMkYzNjdFNDQvZnJmci94ODYvbXNlaW5zdGFsbC5leGU=&os=&lang=fr_FR&desc=QW50aXZpcnVzIGdyYXR1aXQgc2lnbsOpIE1pY3Jvc29mdA==&gclid=1

http://go.microsoft.com/.../?LinkID=231276

http://mse.dlservice.microsoft.com/download/A/3/8/A38FFBF2-1122-48B4-AF60-E44F6DC28BD8/enus/.../mseinstall.exe

http://download.microsoft.com/download/A/3/8/A38FFBF2-1122-48B4-AF60-E44F6DC28BD8/ENUS/.../MSEInstall.exe

http://mse.dlservice.microsoft.com/download/A/3/8/A38FFBF2-1122-48B4-AF60-E44F6DC28BD8/enus/.../mseinstall.exe

http://go.microsoft.com/.../?LinkID=231277

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.