Microsoft Intune Endpoint Protection
What is Microsoft Intune Endpoint Protection?
Microsoft Intune Endpoint Protection is software application developed by Microsoft Corporation. It is most commonly found on computers running Windows 7 with nearly 63.33% of installations running this operating system. Microsoft Intune Endpoint Protection's installer is typically 29.00 MB in size and installs around 31 files. The most common release is 4.8.204.0 with 36.67% of all installations currently using this version.
Microsoft Intune Endpoint Protection is most popular in the United States with 46.33% of installations residing in this country.
Microsoft Intune Endpoint Protection adds 3 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, Microsoft Intune Endpoint Protection is known to create 1 firewall exception to allow inbound and outbound connectivity.
Software Behaviors
- Services:
-
- NisSrv.exe runs as a service named 'Microsoft Netwerkinspectie' (NisSrv) "Biedt bescherming tegen inbraakpogingen die gericht zijn op bekende en recentelijk gevonden zwakke plekken in netwerkprotocollen".
- MsMpEng.exe runs as a service named 'Microsoft Antimalware Service' (MsMpSvc) "Helps protect users from malware and other potentially unwanted software".
- Firewall:
-
- shellext.dll is added as a firewall exception for 'C:\Program Files2\HEWLET~1\PCCOE3~1\OVCMS~1\radexecd.exe'.
- Scheduled tasks:
-
- msseces.exe is scheduled as a task with the class '{6FA94EF8-7B88-4C31-9AF5-D831F612AF54}' (runs on registration).
- MpCmdRun.exe is scheduled as a task named 'Microsoft Security Essentials Scan' (runs daily at 11:00 PM).
- Setup.exe is scheduled as a task with the class '{8394A627-17ED-49B2-BAB7-EDEA22CED87E}' (runs on registration).
Startup Entries
- Startup tasks:
-
- msseces.exe is automatically launched at startup through a scheduled task named 5.
- MpCmdRun.exe is automatically launched at startup through a scheduled task named MS-AntiVir-Update.
- Registry entries:
-
- msseces.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Microsoft Sequrity Essential' and executes as C:\Program Files\Microsoft Security Client\msseces.exe.
- Registry entries (User):
-
- msseces.exe is loaded once in the current user (HKCU) registry as a startup file name 'Application Restart #1' which loads as C:\Program Files\Microsoft Security Client\msseces.exe -Recover.
Software Details
- URL:
- https://go.microsoft.com/fwlink/?linkid=206391&mkt=en-us
- Support:
- https://go.microsoft.com/fwlink/?linkid=206391&mkt=it-it
- Installation path:
- C:\Program Files\Microsoft Security Client
- Uninstaller:
- "C:\Program Files\Microsoft Security Client\Setup.exe" /x
- Size:
- 29.00 MB
- Language:
- English
Microsoft Intune Endpoint Protection Executable Details
- Primary executable:
- sqmapi.dll
- Name:
- Microsoft Intune Endpoint Protection
- Path:
- C:\Program Files\Microsoft Security Client\sqmapi.dll
- MD5:
- 93812fdc01aa864195816cd814445f95
- SHA-1:
- –
- SHA-256:
- –
| File Type | Filename | MD5 |
|---|---|---|
|
DLL
|
4a083fe2065b6368db1b9f5a8bdca5b6 |