home

sqmapi.dll

SQM Client

Microsoft Corporation

The Software Quality Management/Metrics (SQM) library collects data for the customer experience program in order to help improves features of Windows. Data upload can be transmitted through a customer-hosted SQM proxy to the SQM service or directly to Microsoft using the Client-to-Service Protocol. This is installed with multiple programs including Microsoft Mouse and Keyboard Center and Microsoft .NET Framework 4.5. The file has been seen being downloaded from kinectcpp.googlecode.com.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® Windows® Operating System

Description:
SQM Client

Version:
6.1.7600.16385 (win7_rtm.090713-1255)

MD5:
d475bbd6fef8db2dde0da7ccfd2c9042

SHA-1:
80887bdb64335762a3b1d78f7365c4ee9cfaeab5

SHA-256:
8e9d77a216d8dd2be2b304e60edf85ce825309e67262fcff1891aede63909599

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/19/2024 6:30:23 AM UTC  (today)

File size:
191.8 KB (196,416 bytes)

Product version:
6.1.7600.16385

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
sqmapi.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\microsoft security client\sqmapi.dll

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
7/13/2009 7:00:18 PM

Valid to:
10/13/2010 7:10:18 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6105F71E000000000032

File PE Metadata
Compilation timestamp:
7/13/2009 9:11:00 PM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3072:ZTNeShyMVz1kEbFoKJ7Sk75QKsyJOHuFAwPQYQ5wEZr7aaVIpVe2XD70kN5/0zfN:lzV2wPQ5wyaaVIpI2XD706/0TmU1MSmI

Entry address:
0x1462

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 7D, 0D, 00, 00, 5D, 90, 90, 90, 90, 90, 6A, 2C, 68, 78, 1A, 11, 6C, E8, 94, FF, FF, FF, 8B, 4D, 0C, 33, D2, 42, 89, 55, E4, 33, F6, 89, 75, FC, 89, 0D, 90, D0, 13, 6C, 3B, CE, 0F, 84, BD, 2E, 00, 00, 3B, CA, 0F, 85, C6, 2E, 00, 00, A1, C4, D4, 13, 6C, 3B, C6, 0F, 85, 6D, 47, 00, 00, 39, 75, E4, 74, 5E, C7, 45, FC, 02, 00, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 7C, FE, FF, FF, 89, 45, E4, 89, 75, FC, 39, 75, E4, 74, 3E, 8B, 4D, 0C, C7, 45, FC, 03, 00...
 
[+]

Entropy:
6.7501

Code size:
173 KB (177,152 bytes)

The file sqmapi.dll has been discovered within the following programs.

Microsoft .NET Framework 4.5  by Microsoft Corporation
The .NET Framework is a software framework that includes a large library and provides language interoperability across several programming languages. Programs written for the .
go.microsoft.com/fwlink/?LinkId=249109
8% remove it
Microsoft Flight  by Microsoft Corporation
Microsoft Flight is a flight simulation game from Microsoft Studios created as a successor to the discontinued Microsoft Flight Simulator series. The simulation game is offered "free-to-play"; charging gamers for downloading extra content, aircraft or scenery.
www.microsoft.com/games/flight
3% remove it
Microsoft IntelliPoint 8.2  by Microsoft Corporation
IntelliPoint is the Microsoft brand software driver for Microsoft's mice. Software features may only be available with certain mice models. (Button options are specific to the selected model.
www.microsoft.com
5% remove it
Microsoft IntelliType Pro 8.2  by Microsoft Corporation
With IntelliType Pro 8.2, setup automatically detects your keyboard model. If you have more than one keyboard attached to your computer, each keyboard model can have different settings. PS/2 devices are no longer supported in IntelliType Pro 8.2.
www.microsoft.com/en-us/download/details.aspx?id=26950
8% remove it
Microsoft Mouse and Keyboard Center  by Microsoft Corporation
Publisher's description - “Mouse and Keyboard Center helps you personalize and customize how you work on your PC. Tailor your mouse and keyboard to meet your unique needs and work style. Modify your mouse and keyboard settings to make it easier to use the unique features of most PC apps.”
7% remove it
Microsoft Security Client  by Microsoft Corporation
Microsoft Security Client for Microsoft Security Essentials is an antivirus software product that provides protection against different types of malware such as computer viruses, spyware, rootkits and Trojan horses.
4% remove it
Microsoft Security Essentials  by Microsoft Corporation
Microsoft Security Essentials is an antivirus software product that provides protection against different types of malware such as computer viruses, spyware, rootkits and Trojan horses.
go.microsoft.com/fwlink/?LinkID=195291&mkt=en-us
8% remove it
Microsoft SkyDrive  by Microsoft Corporation
SkyDrive is a file hosting service that allows users to upload and sync files to a cloud storage and then access them from a Web browser or their local device.
6% remove it
 
Powered by Should I Remove It?

The file sqmapi.dll has been seen being distributed by the following URL.

https://kinectcpp.googlecode.com/svn/trunk/.../SQMAPI.DLL

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.