Microsoft Security Essentials Prerelease

Microsoft Security Essentials Prerelease

by Microsoft Corporation

What is Microsoft Security Essentials Prerelease?

Microsoft Security Essentials Prerelease is software application developed by Microsoft Corporation. It is most commonly found on computers running Windows 7 with nearly 90.09% of installations running this operating system. Microsoft Security Essentials Prerelease's installer is typically 25.00 MB in size and installs around 37 files. The most common release is 4.2.223.1 with 18.28% of all installations currently using this version.

Microsoft Security Essentials Prerelease is most popular in the United States with 69.79% of installations residing in this country.

Microsoft Security Essentials Prerelease adds 5 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, Microsoft Security Essentials Prerelease is known to create 4 firewall exceptions to allow inbound and outbound connectivity.

About Microsoft Security Essentials Prerelease?

The Microsoft Security Essentials Prerelease program provides users with the opportunity to access and test the most up-to-date versions of Security Essentials prior to their public release. By participating in this program, users can contribute to the testing and refinement of the software before it becomes widely available to the public.

Software Behaviors

Services:
  • NisSrv.exe runs as a service named 'Microsoft Netwerkinspectie' (NisSrv) "Biedt bescherming tegen inbraakpogingen die gericht zijn op bekende en recentelijk gevonden zwakke plekken in netwerkprotocollen".
  • MsMpEng.exe runs as a service named 'Microsoft Antimalware Service' (MsMpSvc) "Helps protect users from malware and other potentially unwanted software".
Firewall:
  • shellext.dll is added as a firewall exception for 'C:\Program Files2\HEWLET~1\PCCOE3~1\OVCMS~1\radexecd.exe'.
  • msseces.exe is added as a firewall exception for 'C:\Program Files\Microsoft Security Client\msseces.exe'.
  • MsMpEng.exe is added as a firewall exception for 'C:\Program Files\Microsoft Security Client\MsMpEng.exe'.
  • Setup.exe is added as a firewall exception for 'C:\Program Files\Microsoft Security Client\setup.exe'.
Scheduled tasks:
  • MpCmdRun.exe is scheduled as a task named 'MpIdleTask' (runs when idle).
  • msseces.exe is scheduled as a task with the class '{6FA94EF8-7B88-4C31-9AF5-D831F612AF54}' (runs on registration).
  • MsMpEng.exe is scheduled as a task with the class '{36EFC519-FFC0-44BA-A865-06780C54FA6D}' (runs on registration).
  • Setup.exe is scheduled as a task with the class '{EAC44AF3-B6F9-401D-8A78-249D0D819684}' (runs on registration).
  • MsMpRes.dll is scheduled as a task named 'Microsoft-Windows-TaskScheduler_Operational_Microsoft-Windows-TaskScheduler_103'.

Startup Entries

Startup tasks:
  • msseces.exe is automatically launched at startup through a scheduled task named 5.
  • MpCmdRun.exe is automatically launched at startup through a scheduled task named MS-AntiVir-Update.
Registry entries:
  • msseces.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Microsoft Security Client User Interface' and executes as C:\Program Files\Microsoft Security Client\msseces.exe.
  • MpCmdRun.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Microsoft Malware Protection Command Line Utility' and executes as C:\Program Files\Microsoft Security Client\MpCmdRun.exe.
  • MsMpEng.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'New startup' and executes as "C:\Program Files\Microsoft Security Client\MsMpEng.exe".
Registry entries (User):
  • msseces.exe is loaded once in the current user (HKCU) registry as a startup file name 'Application Restart #1' which loads as C:\Program Files\Microsoft Security Client\msseces.exe -Recover.

Software Details

URL:
https://go.microsoft.com/fwlink/?linkid=228940&mkt=en-us
Support:
Installation path:
C:\Program Files\Microsoft Security Client
Uninstaller:
C:\Program Files\Microsoft Security Client\Setup.exe /x
Size:
25.00 MB
Language:
English

Microsoft Security Essentials Prerelease Executable Details

Primary executable:
sqmapi.dll
Name:
Microsoft Security Essentials Prerelease
Path:
C:\Program Files\Microsoft Security Client\sqmapi.dll
MD5:
93812fdc01aa864195816cd814445f95
SHA-1:
SHA-256:
Files installed by Microsoft Security Essentials Prerelease
File Type Filename MD5
DLL
93812fdc01aa864195816cd814445f95
DLL
a5e4b3ff51cf5b7926d9651908feb666
EXE
f4d12a420bff9c7e9f5c5106608be240
DLL
166a0a49f0f49974ae8e71a14bc30d1f
DLL
8cbea4aabfa48c69832b299e23607029
DLL
fe6ea680bae25d5b8cc19c2e2b129c58
DLL
2681fdd5cf931217299a3dc383540bfc
EXE
89f2aedc2788696702141ab82c3e7866
DLL
6038b87e64552b0e7f863f20fd87b2ff
DLL
f6b55d7cdffb234808664a7283e16e56