home

MSEInstall.exe

Microsoft Security Client

Microsoft Corporation

The MSEInstall Package is the installer for Microsoft Security Essentials, an anti-virus protection platform. Upon new releases/updates of MSEInstall, Windows Update will download the client and install it. This is a setup and installation application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Security Client

Description:
MSEInstall Package

Version:
4.4.0304.0

MD5:
c5a3f3d1c541514c0327bbc7c4c9c8b9

SHA-1:
c2d04b1ec955a7c1953c210756fe83a7db22d6df

SHA-256:
73219ac5089111164469c4f773ea01a2db8fe0ed2c0d25b4896f5d74ccd7012c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
5/2/2024 9:12:53 PM UTC  (today)

File size:
13.1 MB (13,693,624 bytes)

Product version:
4.4.0304.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
MSEInstall.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\mseinstall.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
1/24/2013 11:33:36 PM

Valid to:
4/25/2014 12:33:36 AM

Subject:
CN=Microsoft Corporation, OU=AOC, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000ADC6484C2DCB9A424C0001000000AD

File PE Metadata
Compilation timestamp:
3/13/2009 7:58:56 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
393216:LOZ4Y2LbXooWNCS16bFIt9zJb7YCy+PmWEuCM5DO9ul:qB2goWcI6Ot9yCybWn/fl

Entry address:
0x9850

Entry point:
48, 83, EC, 58, 48, 89, 5C, 24, 70, 48, 89, 7C, 24, 78, 66, 81, 3D, 99, 67, FF, FF, 4D, 5A, 74, 08, 33, DB, 89, 5C, 24, 60, EB, 7C, 48, 63, 05, C4, 67, FF, FF, 48, 8D, 0D, 81, 67, FF, FF, 48, 03, C1, 81, 38, 50, 45, 00, 00, 74, 08, 33, DB, 89, 5C, 24, 60, EB, 5B, 0F, B7, 48, 18, 81, F9, 0B, 01, 00, 00, 74, 32, 81, F9, 0B, 02, 00, 00, 74, 08, 33, DB, 89, 5C, 24, 60, EB, 3F, 83, B8, 84, 00, 00, 00, 0E, 77, 08, 33, DB, 89, 5C, 24, 60, EB, 2E, 33, DB, 39, 98, F8, 00, 00, 00, 0F, 95, C3, 89, 5C, 24, 60, EB, 1D...
 
[+]

Code size:
56 KB (57,344 bytes)

The file MSEInstall.exe has been seen being distributed by the following 30 URLs.

http://gsf-cf.softonic.com/c2d/04b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304591&instance=softonic_es&type=PROGRAM&Expires=1422766954&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=X3yc8BUUjWCf4WZ2wGN55ZW3rumvhXXHscmnNVxcXqoS8z9CmUNnfqWtcTXhl~teA1axkvMAYijZXNnOBAV0grItwhjrEoMnzpK8phFofwUhC0s5iYJFpvzgrAMitbA6j90jy0QrEcUy21Atal9d-4sVZzhlDsn8RFG0xbiQODI_&filename=mseinstall_443040.exe

http://gsf-cf.softonic.com/c2d/04b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304591&instance=softonic_es&type=PROGRAM&Expires=1428828555&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Wx1K~xc1hORLb0g6as0OkFNFUTmHox-D2RwqK3uNorlcGX7XMoqmRX7e1buzccfnsZs7Dp46VHOgKLdDPeMsmXoq1NCmsKXCY5BrQ0u2ZJjKQ-BD0XIDN0bG1~WVVtumNCSUGK0vdysWQQC8VTY12NM7X7QB9B7-0b0lb-QFJs8_&filename=mseinstall_443040.exe

http://gsf-cf.softonic.com/c2d/04b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304591&instance=softonic_es&type=PROGRAM&Expires=1426550403&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=FoUCa5UNIslo1-QKqVMF4vF-ChJTnRjYoHI6ECbpgVWS0sB9vCtvP9Hu6jY0K4iC-YbiZrvTCAj1L0L6tVfbm3vbXHXjt7kxfTJ-9cE-wJ--iLwnWkbYuJhQdyzKroYcjG6BZQQNxH06gU~P3A9atzf7N~~gOKYSgb7PaArts34_&filename=mseinstall_443040.exe

http://gsf-cf.softonic.com/c2d/04b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=93641&instance=softonic_en&type=PROGRAM&Expires=1427085527&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=CC7KEd3RFUjymvnvlIfTlGyVJGlHDoKHUzg5~CDvuzExyvVeuZ0rY2kzqa2yfkkgvf67yCryt3tSMIop2Jp3oTZFpBn06ywzUMuE~9iLa54tCkD~~hNs-oaGmxvb1u3Uh9xYicEB0~5gYtG6dygCAVf84i2l8u3wTM5f0GYryg4_&filename=mseinstall_443040.exe

http://gsf-cf.softonic.com/c2d/04b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304591&instance=softonic_es&type=PROGRAM&Expires=1430690909&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=dNsYlKD28NGH~d2kHc5rJd0R0y4gEPzqMAAqWYn8O~0vBqSagfLQJb5Nhid42jKJ71SeuAnh~83~n3qfjpV7r7nSWrEtyEDXg9TO9DWkaFyx052QssZpvdi8ix-vUenufvKp7rCScvcv8j30Oy5Tx0ZTDqXCykmISQP9aSVzEc4_&filename=mseinstall_443040.exe

http://gsf-cf.softonic.com/c2d/04b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304591&instance=softonic_es&type=PROGRAM&Expires=1422052738&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=eqT~4IJEb99ClKkAD8hgQu3dqjn8MLuwhuYBj9WQLPfAhJtM2LYbuyLTPlYQpePkhM90lw~1SoFAAh5VoS0T5m6FFbxP81imbODdQjac4pwZfO15bLVy54Z84ZWV2IHbeQDfxUm7gyE7J4Wc3wRT5HtoUf9dzg2zE75Z0jsVIcc_&filename=mseinstall_443040.exe

http://gsf-cf.softonic.com/c2d/04b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304591&instance=softonic_es&type=PROGRAM&Expires=1429738020&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=LtyjrL9z18tpKyJcSqIdm9gx8E01yDY7goU0i7V28SbMUzAaT8P-wmb5GtuYYh8wrfV40LRFEAQasx69X3ALps-hAivG-vvtGT-cltPftqZHOZ86fDeuH4EtEqhbDdUrvMPg6IwUkWMFqXnHWZ6QyrxZW0C7xro7Dzv3X2gNijo_&filename=mseinstall_443040.exe

http://gsf-cf.softonic.com/c2d/04b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304591&instance=softonic_es&type=PROGRAM&Expires=1428799874&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=CWE4rQigV1vHfeirNRRhlyZC1nBKW6ixCQF7y~NYsYKK9vbRN0LTreCw-7NETB3UJNeD1Ht5IKpVPD-A~zOTH~6EQv-aGLD-dSFZUFlcmCs8LWzkeSICM64Vr7ja7lpOElsYGmIGlLJkc27C7e247iSirHc0tWj3ZsS7eiQUkhg_&filename=mseinstall_443040.exe

http://gsf-cf.softonic.com/c2d/04b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304591&instance=softonic_es&type=PROGRAM&Expires=1430791032&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Bcm7ea15NN~OzdEXIW5oK3--fom2RIiRF813yJJYoaPqzDin8l3bSA6dhqahum9VaqHC1jG1P82pP7V6urqUmpPgn5p6bFSwjXAonSs0umu9fy8jzuOVqnZumOLSAv9YQw3xt-AHDpkp2b03NWJzChdHtpEhnRjkntCFHXnj1P8_&filename=mseinstall_443040.exe

http://gsf-cf.softonic.com/c2d/04b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304591&instance=softonic_es&type=PROGRAM&Expires=1427629311&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=NJwsZouC1kXlHRydpaRa0G-P7IKUmMoHIgnI20mrPSqePi0XKt731F1UK2cFS~u~qjoyGGX5ZK-6FsTTFvW1OJBRp-DId1K6k6vyNTZM1H1v1XWYLU55kpQqRPi~30VZFWHP5rqZOaY3NmYE0n~vQ2Q07Ul9IyW0RuK-jK4Szl0_&filename=mseinstall_443040.exe

http://gsf-cf.softonic.com/c2d/04b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304591&instance=softonic_es&type=PROGRAM&Expires=1429516928&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=TMp~~AufcdW609qlYMWs~~d3NDcf7yZS3d3K1cZBil7oddR87ESip7Ev7o6OccG~PtK10fuG0LeJJhRdQ5mZ3Qu3qJb9Ey72FBo4wAA77U~CNpC7YW-i8XjUhCQPukK57Ef3h3lUfKvrmVy6CLdu2-6gYilbMrER9O8Ve67agk4_&filename=mseinstall_443040.exe

http://gsf-cf.softonic.com/c2d/04b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304591&instance=softonic_es&type=PROGRAM&Expires=1424333139&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=e4pxZThxfw3fV12dDh0HPzbgbtB39kGlIfnz2Nprncn2eEcWN8xGFsMgMOo4Dg-Mnb9t-o8F1bb7PXYvdt~hkaSwYmg12Z8dlKNx44mXyNiqdcW-7nbQNOXcxdEzQbyLOBudivBy4JDDfjdVEZc0hYLpxpU3Yw0cj8Zk7F1N9EE_&filename=mseinstall_443040.exe

http://gsf-cf.softonic.com/c2d/04b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304591&instance=softonic_es&type=PROGRAM&Expires=1430299336&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=JWNg4JTM~QYoxladC04oaAfA~2gE4abo8ARNofugG0z-GyqvMEumKScKpS7fkGnv54WjAgFHLVXBVxA1~KRl6O8dCcCGm7WszyzGU5Dd2P~4vo85XJPDeleOBEetv1fNoRZSH~kcssoD7kzBK6FxPSPVoKRQ7iwKJePFs34fgSE_&filename=mseinstall_443040.exe

http://gsf-cf.softonic.com/c2d/04b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304591&instance=softonic_es&type=PROGRAM&Expires=1422442491&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=DnCblw8tUzxKoKhqt2NA76BzqMBXQ~z3xJ14xmxFj7HuI2kEa-JvSR0Weet5jbkTl0FawNTvxjhFRNf8xkGIRGUEo65lTVNjrxspc38cO5N94DC8uPDCzIOsEzT5Qvlp2Cp~q3XY8YQncd35w-49G2s-vN4vYEi~yHCiJjhUo0E_&filename=mseinstall_443040.exe

http://gsf-cf.softonic.com/c2d/04b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304591&instance=softonic_es&type=PROGRAM&Expires=1425609701&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=b~kV4VPhqsITp0hrDpOsp95fZCNDYaytkCaTfeiUbO20YxbHyqmQh5JcqP-WYVVsJNcBa5xyJRwQSBJuPIdqTyTuL8UC6aiuzD0MV91p0BBmUjsDih0Zp3jiO~okMXqvEpDJDdJFmTfk1xtZ-69hinfGhSnQJL~Ec6rKXmcDXsM_&filename=mseinstall_443040.exe

http://gsf-cf.softonic.com/c2d/04b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304591&instance=softonic_es&type=PROGRAM&Expires=1428948405&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=I-qz6snX8JYZ5czfwf2boBR4baONwtwgsYnog5Eozs6FfbdpBvMLMKVk4A9jysHShA843uuRdEKJuBzxzQRXkBomnR8-TgmbqUEoR7eZn61xRevTpuSjwP3fg0C6ccs1Ftjk-GmHLZTuViRmJyoyscBi0M0St1BHFEDpS2zblEk_&filename=mseinstall_443040.exe

http://gsf-cf.softonic.com/c2d/04b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=93641&instance=softonic_en&type=PROGRAM&Expires=1424363902&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=hKz0GL1BteJkWgIljV-ic98E374xdo09Zapyo8DhTsJ1VYGxipjLPObl2sAW2mxqqUEMtclPOXaHQtQiqAqAE8ehWReIbp0TsCAFbdOnCsAyasgMXJy1JZb2DdefbC4CMzkmnGNjCv5Ky9c6bagNnp-hqBUZvRFbBR~kaiD4miM_&filename=mseinstall_443040.exe

http://gsf-cf.softonic.com/c2d/04b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304591&instance=softonic_es&type=PROGRAM&Expires=1427311243&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=I5OiEOObkOG4hv1sgXyUQ3HS5~wc5cvHmpXSEP1Vw3ieyfw1qXb-pX2ZciKGKUDLR9TJYWCxYXbWSZtjJKiMcHm0zatfc6h19HBDPYT-JqPD4bv2nncIHuYOARt3HyX-qaLe8J1Lf4UWq-FyMUP5hMghEBDhMRsWq~17vlNgtro_&filename=mseinstall_443040.exe

http://gsf-cf.softonic.com/c2d/04b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304591&instance=softonic_es&type=PROGRAM&Expires=1426788328&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=XkLW1WWB0DnRRtFz8~VxZ5yssBFsazj22MeCdPnkyDBZgmGIxNY4QDBiTF0mAPRq0IWn65G-jTzen-vVscncVDDSRvmjm~~KzeqFHawv8gfwUTCz~ClKkGPtMd0ef6AQlhES2RNPc~RpLbQsPFE~ekYlvjUJTCQBF35zDAibtQw_&filename=mseinstall_443040.exe

http://softwareapp-pro.s3.amazonaws.com/uploads/program_file/file_url/223/.../mseinstall.exe

http://gsf-cf.softonic.com/c2d/04b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304591&instance=softonic_es&type=PROGRAM&Expires=1424044181&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Y9jbu89xUGZiqK2z5t-Uq-~MMJCplRvf3KBATIEN3ObmrKMAuavlPg9iirGdUTNeCa9fbfktFn4Gy056A5Sn6kPZS6EPZUwcqxi3Fm5~DHfVqZEryZ9o3LhsDIrpuEeVwV99sWCUjd1vavk64JO41FLJe1a8BwSAQv7n8Oedjvs_&filename=mseinstall_443040.exe

http://gsf-cf.softonic.com/c2d/04b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304591&instance=softonic_es&type=PROGRAM&Expires=1429374858&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=IlK1nxOHeNgIj2OwLyyEgWtkJGUKr9TdrYZvf7uVelWJQgQlLP7H-wJfxKScxPHbWUEKDEn2zMVgILYnHThMSxd0eGibfIP0T85lZDWHVAL0R6FomPEu0VRkG~ejVaeOv9pKYQsAP01eQY11gVKf3efcxT2uRl23JiveHcqdYgA_&filename=mseinstall_443040.exe

http://gsf-cf.softonic.com/c2d/04b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304591&instance=softonic_es&type=PROGRAM&Expires=1431417727&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=A8Mh8DTn~U1bSnxYeCe0CCsaFB7-A4~mTiDvx2pCjGJEEdLAaiXEJV~4CLEiUEQZZB7M3f63ebn2K0Ei5cf~~NzhNjywCZ3obypxfcdo-2WdQYM2IWY-r1NQdglrVszIPhwQCGJYxgdPcHfE1tu95~k908TR3rtc3xzM8L9reQA_&filename=mseinstall_443040.exe

http://global-shared-files-l3.softonic.com/c2d/04b/.../file?nvb=20150125130134&nva=20150126010234&token=0b7b9db0c9a6922161eba&SD_used=0&channel=WEB&fdh=no&id_file=304591&instance=softonic_es&type=PROGRAM&filename=mseinstall_443040.exe

http://gsf-cf.softonic.com/c2d/04b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304591&instance=softonic_es&type=PROGRAM&Expires=1425246904&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=hb-dFjieauvvqdt2D-9p0lwFPIznD4xk~llb9jH5BWWoTlqjr2I2HnwgqmFvrTE-dmr7K5OKFrLp0CCdLG7FYZ49Qffeyh0BVhcup3duCgnLTDzdriLYn-ADAnxPyODNv-ed8w7nNQrfOoKyHHMDbH-jKPjmcI0NXgmu7DO1bGg_&filename=mseinstall_443040.exe

http://190.254.219.24/msupdate/2/A/C/2AC6E889-9EBB-4E06-A011-1AA9DAEDDB69/ESES/.../MSEInstall.exe

http://200.35.62.52/msupdate/2/A/C/2AC6E889-9EBB-4E06-A011-1AA9DAEDDB69/eses/.../mseinstall.exe

http://mse.dlservice.microsoft.com/download/2/A/C/2AC6E889-9EBB-4E06-A011-1AA9DAEDDB69/eses/.../mseinstall.exe

http://download.microsoft.com/download/2/A/C/2AC6E889-9EBB-4E06-A011-1AA9DAEDDB69/ESES/.../MSEInstall.exe

http://go.microsoft.com/.../?LinkID=231277

Latest 30 of 30 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.