» MSEInstall.exe
Overview
Analysis
File Details
Programs (1)
Downloads (2)

MSEInstall.exe

Microsoft Security Client

Microsoft Corporation

The MSEInstall Package is the installer for Microsoft Security Essentials, an anti-virus protection platform. Upon new releases/updates of MSEInstall, Windows Update will download the client and install it. This is a self-extracting archive and installer. The file has been seen being downloaded from mse.dlservice.microsoft.com and multiple other hosts.

File name:

MSEInstall.exe

Publisher:

Microsoft Corporation (signed and verified)

Product:

Microsoft Security Client

Description:

MSEInstall Package

Version:

4.0.1526.0

MD5:

3f9d6538b1d9b2ab4372abea8e6f43e6

SHA-1:

2026d7cb24a17a6916c8ee5ad1f959583e16fa3c

SHA-256:

84ba78b0baf55a2e75d01911f276c161d0eaa26a15cc8b5c61051c804553a4f8

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)
Whitelisted (by digital signature)

Analysis date:

11/27/2024 1:47:02 AM UTC (today)

File size:

9.8 MB (10,299,264 bytes)

Product version:

4.0.1526.0

Original file name:

MSEInstall.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\low\content.ie5\{random}\mseinstall.exe

Digital Signature

Signed by:

Microsoft Corporation

Authority:

Microsoft Corporation

Valid from:

2/21/2011 9:53:12 PM

Valid to:

5/21/2012 10:53:12 PM

Subject:

CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:

CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:

6101B29B000000000015

File PE Metadata

Compilation timestamp:

3/13/2009 7:51:25 AM

OS version:

5.2

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

7.10

CTPH (ssdeep):

196608:tyXBxpYtA2lGrGzUOm4BFdSmRwuRO9v8hzYobgtWzXdzYPAipv0k/kWU:tFZCGnmY8mqugalMiBY4ip83

Entry address:

0x6B23

Entry point:

6A, 28, 68, B0, 26, 00, 01, E8, AD, 01, 00, 00, 66, 81, 3D, 00, 00, 00, 01, 4D, 5A, 75, 28, A1, 3C, 00, 00, 01, 81, B8, 00, 00, 00, 01, 50, 45, 00, 00, 75, 17, 0F, B7, 88, 18, 00, 00, 01, 81, F9, 0B, 01, 00, 00, 74, 21, 81, F9, 0B, 02, 00, 00, 74, 06, 83, 65, E4, 00, EB, 2A, 83, B8, 84, 00, 00, 01, 0E, 76, F1, 33, C9, 39, 88, F8, 00, 00, 01, EB, 11, 83, B8, 74, 00, 00, 01, 0E, 76, DE, 33, C9, 39, 88, E8, 00, 00, 01, 0F, 95, C1, 89, 4D, E4, 83, 65, FC, 00, 6A, 01, FF, 15, EC, 21, 00, 01, 59, 83, 0D, 2C, D4... 
[+]

Developed / compiled with:

Microsoft Visual C++ v7.1

Code size:

35 KB (35,840 bytes)

The file MSEInstall.exe has been discovered within the following program.

360Amigo System Speedup Free by 360Amigo

360Amigo is registry optimizer. 360Amigo System Speedup bundles a branded version of the Conduit Toolbar, designed to deliver search based advertising and results. During installation the user is presented in some cases with the option to install the toolbar (on by default).

www.360amigo.com

53% remove it

The file MSEInstall.exe has been seen being distributed by the following 2 URLs.

http://mse.dlservice.microsoft.com/download/F/3/9/F392321B-C03D-498A-BEBB-141E2F367E44/frfr/.../mseinstall.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.