MSERT.exe

Microsoft Malware Protection

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Malware Protection

Description:
Microsoft Support Emergency Response Tool

Version:
1.175.556.0

MD5:
9aec431b2def8682c4cd56afdb8ec35c

SHA-1:
71f3e86fdf466baeb9285af98d79042f5ae07948

SHA-256:
7920a10bcaba32e95cce264e4a40e95f0c831e19aff7877e14183ebe5a612d83

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/3/2016 2:52:41 PM UTC  (today)

File size:
97.6 MB (102,343,960 bytes)

Product version:
1.175.556.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
MSERT.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\msert.exe

Digital Signature
Authority:
Microsoft Corporation

Valid from:
4/22/2014 12:39:00 PM

Valid to:
7/22/2015 12:39:00 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000CA6CD5321235C4E1550001000000CA

File PE Metadata
Compilation timestamp:
5/26/2014 6:28:16 PM

OS version:
6.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
1572864:9Ma7bbWQ0Z2+uupn65GKtIwFWzTco2avPtd+AKn5r6dGt6ycno/s/gWr8CWTmJ1B:OcbbWh2+LlKCc4PtdknA65b/GXOQzJU4

Entry address:
0x305FF

Entry point:
E8, 1D, 09, 00, 00, E9, 0B, FE, FF, FF, CC, CC, CC, CC, CC, FF, 25, 94, 14, 00, 01, CC, CC, CC, CC, CC, CC, FF, 25, A4, 14, 00, 01, CC, CC, CC, CC, CC, CC, FF, 25, B0, 14, 00, 01, CC, CC, CC, CC, CC, CC, FF, 25, AC, 14, 00, 01, CC, CC, CC, CC, CC, CC, FF, 25, A8, 14, 00, 01, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 5D, E9, 05, 00, 00, 00, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 81, EC, D0, 02, 00, 00, A1, 00, F0, 03, 01, 33, C5, 89, 45, FC, 89, 85, E0, FD, FF, FF, 89, 8D, DC, FD, FF, FF, 89, 95, D8, FD, FF...
 
[+]

Entropy:
7.9526  (probably packed)

Code size:
246 KB (251,904 bytes)