sqmapi.dll

SQM Client file version info

Library on Windows 9 known copies with hashes

Is it the real sqmapi.dll?

file version info and known copies

Installed inC:\Program Files (x86)\Internet Explorer\
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\
C:\Program Files (x86)\Windows Multimedia Platform\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionSQM Client

9 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Multimedia Platform\sqmapi.dll · signed by Microsoft Windows

42fc546b7096fd1737ad976f631757a8e71084561fa77d30fa4a12f92f0a43af

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files\Windows Multimedia Platform\sqmapi.dll · signed by Microsoft Windows

5e8039aef0f2a580f652ab33c11ad8527c30bd251ce1bb1d8bbfbb5cbd0e13f6

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Portable Devices\sqmapi.dll · signed by Microsoft Windows

60d291c3ebdffae55bb843c00014115ad6da32173a237d435d14065f92a3cb01

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Internet Explorer\sqmapi.dll · signed by Microsoft Windows

8e42150dba0acf9779037bb1257a9ffb5ee3a26ed258c8df95b8e44361738dc2

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\sqmapi.dll · signed by Microsoft Windows

a0f136b7cc129466884650c4def111f3c03213d56f7ac3614dd920b05defd99f

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files\Windows Portable Devices\sqmapi.dll · signed by Microsoft Windows

c9fc6942d17085c15d34f1ca3d64aa73e2383d4a5ae7cee4a3a5d45d908b829e

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files\Internet Explorer\sqmapi.dll · signed by Microsoft Windows

e320356d53c168db9080bb04d5e8f4cc16d66657deeb063f9133eac9381bdb1d

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\sqmapi.dll · signed by Microsoft Windows

f9f8331b58771258974d39cf588432b4969b038ca1df3fbbd73dfbd8be5e295e

6.0.6000.16386 (vista_rtm.061101-2205) · C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\sqmapi.dll · signed by Microsoft Corporation

df09260e8fc9a7715284967ab91b3163e558e1c8f387dffb46ab61a69cba64b6

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.