Microsoft Security Essentials Prerelease

Microsoft Security Essentials Prerelease

by Microsoft Corporation

What is Microsoft Security Essentials Prerelease?

Microsoft Security Essentials Prerelease is software application developed by Microsoft Corporation. It is most commonly found on computers running Windows 7 with nearly 90.09% of installations running this operating system. Microsoft Security Essentials Prerelease's installer is typically 25.00 MB in size and installs around 37 files. The most common release is 4.2.223.1 with 18.28% of all installations currently using this version.

Microsoft Security Essentials Prerelease is most popular in the United States with 69.79% of installations residing in this country.

Microsoft Security Essentials Prerelease adds 5 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, Microsoft Security Essentials Prerelease is known to create 4 firewall exceptions to allow inbound and outbound connectivity.

About Microsoft Security Essentials Prerelease?

The Microsoft Security Essentials Prerelease program provides users with the opportunity to access and test the most up-to-date versions of Security Essentials prior to their public release. By participating in this program, users can contribute to the testing and refinement of the software before it becomes widely available to the public.

Software Behaviors

Services:
  • NisSrv.exe runs as a service named 'Microsoft Netwerkinspectie' (NisSrv) "Biedt bescherming tegen inbraakpogingen die gericht zijn op bekende en recentelijk gevonden zwakke plekken in netwerkprotocollen".
  • MsMpEng.exe runs as a service named 'Microsoft Antimalware Service' (MsMpSvc) "Helps protect users from malware and other potentially unwanted software".
Firewall:
  • shellext.dll is added as a firewall exception for 'C:\Program Files2\HEWLET~1\PCCOE3~1\OVCMS~1\radexecd.exe'.
  • msseces.exe is added as a firewall exception for 'C:\Program Files\Microsoft Security Client\msseces.exe'.
  • MsMpEng.exe is added as a firewall exception for 'C:\Program Files\Microsoft Security Client\MsMpEng.exe'.
  • Setup.exe is added as a firewall exception for 'C:\Program Files\Microsoft Security Client\setup.exe'.
Scheduled tasks:
  • MpCmdRun.exe is scheduled as a task named 'MpIdleTask' (runs when idle).
  • msseces.exe is scheduled as a task with the class '{6FA94EF8-7B88-4C31-9AF5-D831F612AF54}' (runs on registration).
  • MsMpEng.exe is scheduled as a task with the class '{36EFC519-FFC0-44BA-A865-06780C54FA6D}' (runs on registration).
  • Setup.exe is scheduled as a task with the class '{EAC44AF3-B6F9-401D-8A78-249D0D819684}' (runs on registration).
  • MsMpRes.dll is scheduled as a task named 'Microsoft-Windows-TaskScheduler_Operational_Microsoft-Windows-TaskScheduler_103'.

Startup Entries

Startup tasks:
  • msseces.exe is automatically launched at startup through a scheduled task named 5.
  • MpCmdRun.exe is automatically launched at startup through a scheduled task named MS-AntiVir-Update.
Registry entries:
  • msseces.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Microsoft Security Client User Interface' and executes as C:\Program Files\Microsoft Security Client\msseces.exe.
  • MpCmdRun.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Microsoft Malware Protection Command Line Utility' and executes as C:\Program Files\Microsoft Security Client\MpCmdRun.exe.
  • MsMpEng.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'New startup' and executes as "C:\Program Files\Microsoft Security Client\MsMpEng.exe".
Registry entries (User):
  • msseces.exe is loaded once in the current user (HKCU) registry as a startup file name 'Application Restart #1' which loads as C:\Program Files\Microsoft Security Client\msseces.exe -Recover.

Software Details

URL:
https://go.microsoft.com/fwlink/?linkid=228940&mkt=en-us
Support:
Installation path:
C:\Program Files\Microsoft Security Client
Uninstaller:
C:\Program Files\Microsoft Security Client\Setup.exe /x
Size:
25.00 MB
Language:
English

Microsoft Security Essentials Prerelease Executable Details

Primary executable:
sqmapi.dll
Name:
Microsoft Security Essentials Prerelease
Path:
C:\Program Files\Microsoft Security Client\sqmapi.dll
MD5:
93812fdc01aa864195816cd814445f95
SHA-1:
SHA-256:
Files installed by Microsoft Security Essentials Prerelease
File Type Filename MD5
DLL
92a0fce28889ee68552c0d9132096639
DLL
de4bcd4f7bea7e654812049b86b87837
DLL
a6fd36eb1718e53148f098d9a48a0cb6
DLL
801f3e903818b49ba55d925211fb9584
EXE
3234c4240fcda7fc5930bbaa218a12aa
DLL
f50b9765f2f4b4506f5ef86b888b4350
DLL
6860c3633d9d38d3e03a8d1337cfdb5c
DLL
c57bc1e263ff858e0aed7feb8c8e60ee
DLL
33f8d7c8514851b7a633988d38518fa8
EXE
d982d1483170a95c8501c11087b743bc