Microsoft Security Essentials Prerelease

Microsoft Security Essentials Prerelease

by Microsoft Corporation

What is Microsoft Security Essentials Prerelease?

Microsoft Security Essentials Prerelease is software application developed by Microsoft Corporation. It is most commonly found on computers running Windows 7 with nearly 90.09% of installations running this operating system. Microsoft Security Essentials Prerelease's installer is typically 25.00 MB in size and installs around 37 files. The most common release is 4.2.223.1 with 18.28% of all installations currently using this version.

Microsoft Security Essentials Prerelease is most popular in the United States with 69.79% of installations residing in this country.

Microsoft Security Essentials Prerelease adds 5 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, Microsoft Security Essentials Prerelease is known to create 4 firewall exceptions to allow inbound and outbound connectivity.

About Microsoft Security Essentials Prerelease?

The Microsoft Security Essentials Prerelease program provides users with the opportunity to access and test the most up-to-date versions of Security Essentials prior to their public release. By participating in this program, users can contribute to the testing and refinement of the software before it becomes widely available to the public.

Software Behaviors

Services:
  • NisSrv.exe runs as a service named 'Microsoft Netwerkinspectie' (NisSrv) "Biedt bescherming tegen inbraakpogingen die gericht zijn op bekende en recentelijk gevonden zwakke plekken in netwerkprotocollen".
  • MsMpEng.exe runs as a service named 'Microsoft Antimalware Service' (MsMpSvc) "Helps protect users from malware and other potentially unwanted software".
Firewall:
  • shellext.dll is added as a firewall exception for 'C:\Program Files2\HEWLET~1\PCCOE3~1\OVCMS~1\radexecd.exe'.
  • msseces.exe is added as a firewall exception for 'C:\Program Files\Microsoft Security Client\msseces.exe'.
  • MsMpEng.exe is added as a firewall exception for 'C:\Program Files\Microsoft Security Client\MsMpEng.exe'.
  • Setup.exe is added as a firewall exception for 'C:\Program Files\Microsoft Security Client\setup.exe'.
Scheduled tasks:
  • MpCmdRun.exe is scheduled as a task named 'MpIdleTask' (runs when idle).
  • msseces.exe is scheduled as a task with the class '{6FA94EF8-7B88-4C31-9AF5-D831F612AF54}' (runs on registration).
  • MsMpEng.exe is scheduled as a task with the class '{36EFC519-FFC0-44BA-A865-06780C54FA6D}' (runs on registration).
  • Setup.exe is scheduled as a task with the class '{EAC44AF3-B6F9-401D-8A78-249D0D819684}' (runs on registration).
  • MsMpRes.dll is scheduled as a task named 'Microsoft-Windows-TaskScheduler_Operational_Microsoft-Windows-TaskScheduler_103'.

Startup Entries

Startup tasks:
  • msseces.exe is automatically launched at startup through a scheduled task named 5.
  • MpCmdRun.exe is automatically launched at startup through a scheduled task named MS-AntiVir-Update.
Registry entries:
  • msseces.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Microsoft Security Client User Interface' and executes as C:\Program Files\Microsoft Security Client\msseces.exe.
  • MpCmdRun.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Microsoft Malware Protection Command Line Utility' and executes as C:\Program Files\Microsoft Security Client\MpCmdRun.exe.
  • MsMpEng.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'New startup' and executes as "C:\Program Files\Microsoft Security Client\MsMpEng.exe".
Registry entries (User):
  • msseces.exe is loaded once in the current user (HKCU) registry as a startup file name 'Application Restart #1' which loads as C:\Program Files\Microsoft Security Client\msseces.exe -Recover.

Software Details

URL:
https://go.microsoft.com/fwlink/?linkid=228940&mkt=en-us
Support:
Installation path:
C:\Program Files\Microsoft Security Client
Uninstaller:
C:\Program Files\Microsoft Security Client\Setup.exe /x
Size:
25.00 MB
Language:
English

Microsoft Security Essentials Prerelease Executable Details

Primary executable:
sqmapi.dll
Name:
Microsoft Security Essentials Prerelease
Path:
C:\Program Files\Microsoft Security Client\sqmapi.dll
MD5:
93812fdc01aa864195816cd814445f95
SHA-1:
SHA-256:
Files installed by Microsoft Security Essentials Prerelease
File Type Filename MD5
DLL
b64f4cc4c2172d401ca63967311d20b6
DLL
6ccb62d4a9764c6410d34dfcf082add6
DLL
f629d046519cab299975bbc29d622b1e
EXE
569ac1376b12d4083fc66cc7a304f234
EXE
55ff154537b445e8b2580f40ae79f69a
DLL
5747ebadead181d6f12f7e36f3d6418f
EXE
6dada1b00732df3396155aec01a1cf68