Should I block it?

No, this file is 100% safe to run.

Additional versions

10.50.0009.0700 (BTSA023.120907-1344)	33.33%
10.50.0008.2100 (BTSA023.120821-1014)	66.67%

Relationships

Child process

ctfmon.exe (CTF Loader by Microsoft)

Related files

PE file structure

Show functions

Import table

advapi32.dll

RegCloseKey, RegCreateKeyExW, RegDeleteValueW, RegOpenKeyExW, RegSetValueExW, CryptReleaseContext, RegQueryValueExW

gdi32.dll

DeleteObject, GetDeviceCaps, GetPaletteEntries

kernel32.dll

CreateProcessA, GetPrivateProfileIntA, GetModuleFileNameA, GetFileAttributesW, CreateFileMappingA, CreateEventA, UnmapViewOfFile, MapViewOfFile, DuplicateHandle, SetFilePointer, WriteFile, SetEvent, LeaveCriticalSection, EnterCriticalSection, GetCurrentThreadId, GetCurrentProcess, WideCharToMultiByte, MultiByteToWideChar, CopyFileW, DeleteFileW, SetFileAttributesW, CreateFileW, CreateDirectoryW, GetTempPathW, GetCommandLineW, IsProcessorFeaturePresent, DecodePointer, IsDebuggerPresent, UnhandledExceptionFilter, TerminateProcess, EncodePointer, GetStartupInfoW, HeapSetInformation, InterlockedCompareExchange, CreateFileMappingW, GetAtomNameA, CreateEventW, lstrcmpA, GetLocalTime, FlushFileBuffers, GetProcessTimes, InterlockedDecrement, QueryPerformanceFrequency, QueryPerformanceCounter, VirtualProtect, FlushInstructionCache, IsDBCSLeadByte, GetACP, GetVersionExA, GetCommandLineA, GetTempPathA, FindNextFileW, RemoveDirectoryW, GetSystemDirectoryW, GlobalAddAtomA, GlobalDeleteAtom, InterlockedExchange, GetVersionExW, FindFirstFileW, GetPrivateProfileStringW, GetPrivateProfileIntW, GetModuleHandleW, LoadLibraryW, GetTickCount, GetSystemTimeAsFileTime, FindClose, FreeLibrary, InterlockedIncrement, GetSystemDirectoryA, LoadLibraryA, SetLastError, GetProcAddress, LocalReAlloc, GetModuleFileNameW, CreateMutexW, CreateMutexA, lstrlenW, lstrlenA, FormatMessageA, CloseHandle, Sleep, WaitForSingleObject, ReleaseMutex, DeleteCriticalSection, InitializeCriticalSection, GetLastError, SetUnhandledExceptionFilter, ExitProcess, GetCurrentProcessId, LocalAlloc, LocalFree, GetLongPathNameW

msvcr100.dll

DllMain

shell32.dll

ShellExecuteW, SHFileOperationA, ShellExecuteA, Shell_NotifyIconA, Shell_NotifyIconW, SHGetFolderPathW

shlwapi.dll

StrCmpNW, PathIsDirectoryW, PathRemoveFileSpecA, SHGetValueW, SHGetInverseCMAP, SHCreateShellPalette, wvnsprintfA, SHSetValueW, SHDeleteValueW, PathRemoveFileSpecW, PathIsRelativeW, PathFileExistsW, PathAddBackslashW, wnsprintfW, wnsprintfA, StrCmpIW, StrStrIW, StrStrW, StrCmpNIW, StrChrW, PathIsRelativeA, PathFindFileNameW

txsrvc.dll

TxInitAccessibilitySettings

user32.dll

PostMessageW, RegisterWindowMessageW, LoadCursorW, ReleaseDC, GetDC, GetSystemMetrics, CharLowerBuffW, RegisterClassExW, SystemParametersInfoW, GetSysColor, LoadImageW, DestroyIcon, GetCursorPos, SetForegroundWindow, GetForegroundWindow, TrackPopupMenuEx, GetSubMenu, EnableMenuItem, DestroyMenu, LoadMenuA, KillTimer, SetTimer, SetFocus, DestroyWindow, CreateWindowExW, GetClassInfoExW, GetDoubleClickTime, PostThreadMessageW, RegisterWindowMessageA, LoadStringW, LoadStringA, FindWindowW, SetWindowLongW, GetWindowLongW, MessageBoxA, GetWindowTextW, IsWindow, CallWindowProcW, DefWindowProcW, SendMessageTimeoutW, DispatchMessageW, TranslateMessage, GetMessageW

version.dll

GetFileVersionInfoSizeA, GetFileVersionInfoA, VerQueryValueA

msn.exe

Microsoft MSN Communications System by Microsoft Corporation (Signed)

Remove msn.exe

Version:	10.50.0008.2100 (BTSA023.120821-1014)
MD5:	65f6712da123a33a90f6693cb8e60e44
SHA1:	f0c2906a92491968356e06130843d8883b89f2fe
SHA256:	8e5f3f545c80f1bfefa4d37df6d7ce753d02aa36efba4453a05351e8eace5bf8

Overview

msn.exe executes as a process with the local user's privileges. It is installed with a couple of know programs including MSN published by Microsoft Corporation, MSN from Microsoft Corporation and MSN by Microsoft Corporation. The file is digitally signed by Microsoft Corporation. and is compiled as a 32 bit program.

Details

File name:	msn.exe
Publisher:	Microsoft Corporation
Product name:	Microsoft(R) MSN (R) Communications System
Description:	msn
Typical file path:	C:\Program Files\msn\msncorefiles\msn.exe
File version:	10.50.0008.2100 (BTSA023.120821-1014)
Product version:	10.50.0008.2100
Size:	108.94 KB (111,552 bytes)
Certificate
Issued to:	Microsoft Corporation
Authority (CA):	Microsoft Corporation
Effective date:	Monday, May 21, 2012
Expiration date:	Thursday, February 21, 2013
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 10.0
.NET CLR:	No

More details

Programs

The following programs will install this file

MSN

Microsoft Corporation

8% remove

Network connections

[TCP] bl171ds.mail.services.live.com (65.55.227.215:443)

[UDP] listens on port 4326

[UDP] listens on port 4116

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00104478%	0.028634%
Kernel CPU:	0.00025010%	0.013761%
User CPU:	0.00079468%	0.014873%
Kernel CPU time:	445,875 ms/min	100,923,805ms/min
Context switches:	108/sec	284/sec
Memory
Private memory:	104.44 MB	21.59 MB
Private (maximum):	117.49 MB
Private (minimum):	4 MB
Non-paged memory:	104.44 MB	21.59 MB
Virtual memory:	367.46 MB	140.96 MB
Virtual memory (peak):	534.59 MB	169.69 MB
Working set:	52.11 MB	18.61 MB
Working set (peak):	130.8 MB	37.95 MB
Page faults:	5,817,486/min	2,039/min
I/O
I/O read transfer:	14.44 MB/sec	1.02 MB/min
I/O read operations:	3,643/sec	343/min
I/O write transfer:	539.17 KB/sec	274.99 KB/min
I/O write operations:	1,549/sec	227/min
I/O other transfer:	76.17 KB/sec	448.09 KB/min
I/O other operations:	836/sec	1,671/min
Resource allocations
Threads:	32	12
Handles:	1116	600
GUI GDI count:	711	103
GUI USER count:	309	49

Process properties

Integrety level:	Undefined
Platform:	32-bit
Command line:	"C:\Program Files\msn\msncorefiles\msn.exe"
Owner:	User
Parent process:	Explorer.EXE (Windows Explorer by Microsoft)

Threads

Averages

hmssm9.dll
Total CPU:	1.26192652%	0.272967%
Kernel CPU:	0.07900438%	0.107585%
User CPU:	1.18292214%	0.165382%
Context switches:	15/sec	79/sec
Memory:	904 KB	1.16 MB
msnmetal.dll
Total CPU:	0.13834578%
Kernel CPU:	0.00802493%
User CPU:	0.13032085%
Context switches:	28/sec
Memory:	2 MB
seal.dll
Total CPU:	0.13459182%
Kernel CPU:	0.04129037%
User CPU:	0.09330146%
Context switches:	3/sec
Memory:	736 KB
msn.exe (main module)
Total CPU:	0.03438236%
Kernel CPU:	0.02415766%
User CPU:	0.01022470%
Context switches:	8/sec
Memory:	120 KB
sqlse20.dll
Total CPU:	0.00927614%
Kernel CPU:	0.00782178%
User CPU:	0.00145436%
Context switches:	3/sec
Memory:	108 KB
ntdll.dll
Total CPU:	0.00190810%
Kernel CPU:	0.00063598%
User CPU:	0.00127212%
Memory:	712 KB
WININET.dll
Total CPU:	0.00096545%
Kernel CPU:	0.00067215%
User CPU:	0.00029330%
Memory:	924 KB
sqlcese30.dll
Total CPU:	0.00083546%
Kernel CPU:	0.00079149%
User CPU:	0.00004397%
Memory:	300 KB
dxtrans.dll (Windows Internet Explorer by Microsoft)
Total CPU:	0.00082849%
Kernel CPU:	0.00000000%
User CPU:	0.00082849%
Memory:	228 KB
mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider by Microsoft)
Total CPU:	0.00057438%
Kernel CPU:	0.00047662%
User CPU:	0.00009777%
Memory:	252 KB
mshtml.dll (Windows Internet Explorer by Microsoft)
Total CPU:	0.00036769%
Kernel CPU:	0.00027863%
User CPU:	0.00008906%
Context switches:	2/sec
Memory:	5.75 MB
WS2_32.dll
Total CPU:	0.00035491%
Kernel CPU:	0.00013462%
User CPU:	0.00022029%
Memory:	92 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Distribution by Windows OS

OS version	distribution
Microsoft Windows XP	100.00%

Distribution by country

United States installs about 66.67% of Microsoft(R) MSN (R) Communications System.

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	33.33%
Intel	33.33%
Toshiba	33.33%

Remove Adware and Spyware Programs, FREE Download!