Microsoft Security Essentials Prerelease

Microsoft Security Essentials Prerelease

by Microsoft Corporation

What is Microsoft Security Essentials Prerelease?

Microsoft Security Essentials Prerelease is software application developed by Microsoft Corporation. It is most commonly found on computers running Windows 7 with nearly 90.09% of installations running this operating system. Microsoft Security Essentials Prerelease's installer is typically 25.00 MB in size and installs around 37 files. The most common release is 4.2.223.1 with 18.28% of all installations currently using this version.

Microsoft Security Essentials Prerelease is most popular in the United States with 69.79% of installations residing in this country.

Microsoft Security Essentials Prerelease adds 5 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, Microsoft Security Essentials Prerelease is known to create 4 firewall exceptions to allow inbound and outbound connectivity.

About Microsoft Security Essentials Prerelease?

The Microsoft Security Essentials Prerelease program provides users with the opportunity to access and test the most up-to-date versions of Security Essentials prior to their public release. By participating in this program, users can contribute to the testing and refinement of the software before it becomes widely available to the public.

Software Behaviors

Services:
  • NisSrv.exe runs as a service named 'Microsoft Netwerkinspectie' (NisSrv) "Biedt bescherming tegen inbraakpogingen die gericht zijn op bekende en recentelijk gevonden zwakke plekken in netwerkprotocollen".
  • MsMpEng.exe runs as a service named 'Microsoft Antimalware Service' (MsMpSvc) "Helps protect users from malware and other potentially unwanted software".
Firewall:
  • shellext.dll is added as a firewall exception for 'C:\Program Files2\HEWLET~1\PCCOE3~1\OVCMS~1\radexecd.exe'.
  • msseces.exe is added as a firewall exception for 'C:\Program Files\Microsoft Security Client\msseces.exe'.
  • MsMpEng.exe is added as a firewall exception for 'C:\Program Files\Microsoft Security Client\MsMpEng.exe'.
  • Setup.exe is added as a firewall exception for 'C:\Program Files\Microsoft Security Client\setup.exe'.
Scheduled tasks:
  • MpCmdRun.exe is scheduled as a task named 'MpIdleTask' (runs when idle).
  • msseces.exe is scheduled as a task with the class '{6FA94EF8-7B88-4C31-9AF5-D831F612AF54}' (runs on registration).
  • MsMpEng.exe is scheduled as a task with the class '{36EFC519-FFC0-44BA-A865-06780C54FA6D}' (runs on registration).
  • Setup.exe is scheduled as a task with the class '{EAC44AF3-B6F9-401D-8A78-249D0D819684}' (runs on registration).
  • MsMpRes.dll is scheduled as a task named 'Microsoft-Windows-TaskScheduler_Operational_Microsoft-Windows-TaskScheduler_103'.

Startup Entries

Startup tasks:
  • msseces.exe is automatically launched at startup through a scheduled task named 5.
  • MpCmdRun.exe is automatically launched at startup through a scheduled task named MS-AntiVir-Update.
Registry entries:
  • msseces.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Microsoft Security Client User Interface' and executes as C:\Program Files\Microsoft Security Client\msseces.exe.
  • MpCmdRun.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Microsoft Malware Protection Command Line Utility' and executes as C:\Program Files\Microsoft Security Client\MpCmdRun.exe.
  • MsMpEng.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'New startup' and executes as "C:\Program Files\Microsoft Security Client\MsMpEng.exe".
Registry entries (User):
  • msseces.exe is loaded once in the current user (HKCU) registry as a startup file name 'Application Restart #1' which loads as C:\Program Files\Microsoft Security Client\msseces.exe -Recover.

Software Details

URL:
https://go.microsoft.com/fwlink/?linkid=228940&mkt=en-us
Support:
Installation path:
C:\Program Files\Microsoft Security Client
Uninstaller:
C:\Program Files\Microsoft Security Client\Setup.exe /x
Size:
25.00 MB
Language:
English

Microsoft Security Essentials Prerelease Executable Details

Primary executable:
sqmapi.dll
Name:
Microsoft Security Essentials Prerelease
Path:
C:\Program Files\Microsoft Security Client\sqmapi.dll
MD5:
93812fdc01aa864195816cd814445f95
SHA-1:
SHA-256:
Files installed by Microsoft Security Essentials Prerelease
File Type Filename MD5
DLL
0e30bab32ab154bf2f4e87ad1a4fe1dd
DLL
3343013a3e1339b465f76c733fd6adc5
DLL
65fb3391eb26f5ac647fc40501d8e21d
DLL
090c390ab21f2ed763c075009565f975
DLL
e61a5f6a9a9ca0c2b5eb147d563c0e58
EXE
001b86569b1fa3919c0b38ecaead624d
DLL
25bf2d91b31273dab2886e41d64962b8
DLL
bbd0b36eaa75be6c9251bcb84e5917cc
DLL
b7762d1aeaae5c4aaa5f1677ec3b1512
DLL
88a2017c0352199ab3d1c05e7226d6c4