FdDevQuery.dll

  • File Path: C:\Windows\SysWOW64\FdDevQuery.dll
  • Description: Microsoft Windows Device Query Helper

Hashes

Type Hash
MD5 76F182A56146E931A0FA67C3EDFC5E3F
SHA1 3C335D6CD0BE63EEB8C5565C68EFE92FBAF1728F
SHA256 EB5EFAD873DDFD6435932252D392273AEF71B7E300486E5E3D905D5658568AD2
SHA384 1CA33F8769B4361EEC7ACC0899C41D89941218B95127D61D52FD25D88C6B707F0A262C4902F0BEA8B09AF5F9AD70C7DF
SHA512 75C19E2ED4B3AFCE828B8204DCDEF0A4C40A2E896B1163E631C284EDEE1D91CE30459CBAC0EFF3EE4F0F350BAFDC5C8C71CC0120FE7750BC11469D1DA4164FD6
SSDEEP 384:grrwXZEuCsvwepSoMaPIeZu9+P2nYkUmHyLev6vQ+WEp6C9SseYQW2ViqWRJlrY:grrI29hCSrawvpnxUmOxeY59D
IMP 66B5F2B7251BE2B008ADF73F87F79A41
PESHA1 D05A30AB9C6EFC4D79D5DFECEBB38D53206471DF
PE256 D26994274C268FF7FBC51157871A1E03D26F0850560497DE385ABA74AEAB2889

DLL Exports:

Function Name Ordinal Type
DllGetClassObject 2 Exported Function
DllCanUnloadNow 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: DevQueryHelper.DLL
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/eb5efad873ddfd6435932252d392273aef71b7e300486e5e3d905d5658568ad2/detection/

MIT License. Copyright (c) 2020 Strontic.