tquery.dll

  • File Path: C:\Windows\SysWOW64\tquery.dll
  • Description: Microsoft Tripoli Query

Hashes

Type Hash
MD5 E024DFFFB4BDC87B47EB5BC9EA7E7BD4
SHA1 6A06A11DF9CF4DC1D9B842A1D306CC4F8B8F167D
SHA256 CDB5E3FE741BBC218FB87B2138D32B4860486DC4701E3D18A2B53465ED973040
SHA384 2ABB0C9CBA6981D64F69D864B506CAA9E7E9A9AC34E897D41C261A1B76C9572568308C18CAB6C51408461D92B8C77347
SHA512 3D798A372DC5C8B4A8EF2EF62FD9CC32CAFDA2DAC304B57CF297F6BDBCB98AECE95364F55669C1DA157A9DB7A5B19081C374997322C2BF8D2FFD4636FF7712BB
SSDEEP 49152:jWc0hL48dQ+BYz28FRYylintthIRqsMT2icn059SGJzOsbIL/nyfIyBZwkhz8:p28F+CitQRMT2icn07SGJzFbI7nyfITk
IMP BF3047847817189629269A857E8670F9
PESHA1 E05C1F7EDDDFDF8E825C121261C44D9B9FC62A42
PE256 E6449724E7FD3441AADEB950A22C31F668DDDA86B380AB1A04C1D5C6FFDD2325

DLL Exports:

Function Name Ordinal Type
CMemDeSerStream::SkipChar 59 Exported Function
CMemDeSerStream::SkipDouble 60 Exported Function
CMemDeSerStream::SkipByte 58 Exported Function
CMemDeSerStream::GetWChar 32 Exported Function
CMemDeSerStream::SkipBlob 57 Exported Function
CMemDeSerStream::SkipFloat 61 Exported Function
CMemDeSerStream::SkipUShort 65 Exported Function
CMemDeSerStream::SkipWChar 66 Exported Function
CMemDeSerStream::SkipULong 64 Exported Function
CMemDeSerStream::SkipGUID 62 Exported Function
CMemDeSerStream::SkipLong 63 Exported Function
CMemDeSerStream::GetByte 20 Exported Function
CMemDeSerStream::GetULong 30 Exported Function
CMemDeSerStream::GetLong 27 Exported Function
CMemDeSerStream::GetDouble 23 Exported Function
CMemDeSerStream::GetFloat 25 Exported Function
CMemDeSerStream::PeekULong 38 Exported Function
CMemDeSerStream::GetChar 21 Exported Function
CMemDeSerStream::GetGUID 26 Exported Function
CMemDeSerStream::GetBlob 19 Exported Function
CMemDeSerStream::GetWString 33 Exported Function
CMemDeSerStream::GetUShort 31 Exported Function
CFullPath::MakePath 37 Exported Function
CFullPropSpec::SetProperty 56 Exported Function
CDriveInfo::GetDiskSpace 22 Exported Function
CMemSerStream::PutWString 50 Exported Function
CCiFile::Read 52 Exported Function
CStorageVariant::SetLPWSTR 54 Exported Function
RetailTracerReleaseAll 89 Exported Function
UseLowFragmentationHeap 68 Exported Function
RetailTracerEnable 88 Exported Function
CUnNormalizer::UnNormalizeKey 67 Exported Function
RetailTracerDisable 87 Exported Function
CMemSerStream::PutDouble 42 Exported Function
CMemSerStream::PutFloat 43 Exported Function
CMemSerStream::PutChar 41 Exported Function
CMemSerStream::PutBlob 39 Exported Function
CMemSerStream::PutByte 40 Exported Function
CMemSerStream::PutGUID 44 Exported Function
CMemSerStream::PutUShort 48 Exported Function
CMemSerStream::PutWChar 49 Exported Function
CMemSerStream::PutULong 47 Exported Function
CMemSerStream::PutLong 45 Exported Function
CMemSerStream::PutString 46 Exported Function
CMemDeSerStream::GetString 29 Exported Function
DllRegisterServer 76 Exported Function
DllUnregisterServer 77 Exported Function
DllGetClassObject 75 Exported Function
CreateSecurityStoreStorage 17 Exported Function
DllCanUnloadNow 74 Exported Function
ExceptInitialize 18 Exported Function
PerfmonIDXClose 83 Exported Function
PerfmonIDXCollect 84 Exported Function
PerfmonCollect 82 Exported Function
ExternPropagateEventToOpenQueries 78 Exported Function
PerfmonClose 81 Exported Function
AccessRetailTracer 73 Exported Function
ciDelete 69 Exported Function
AccessDebugTracer 72 Exported Function
_ForceMasterMerge@16 79 Exported Function
_NtQuerySystemInformation@16 80 Exported Function
ciNew 70 Exported Function
CreatePropMapperStorage 16 Exported Function
CreatePropMapperStorage2 15 Exported Function
class CCoTaskAllocator CoTaskAllocator 13 Exported Function
ciNewNoThrow 71 Exported Function
CIState 12 Exported Function
CDriveInfo::IsWriteProtected 36 Exported Function
CFullPropSpec::SetProperty 55 Exported Function
CDriveInfo::IsSameDrive 35 Exported Function
XAct::XAct 8 Exported Function
CiStorage::QueryPidLookupTable 51 Exported Function
CPidLookupTable::Init 34 Exported Function
public: virtual __thiscall CMemSerStream::~CMemSerStream(void) 9 Exported Function
public: virtual __thiscall CPhysStorage::~CPhysStorage(void) 10 Exported Function
CDriveInfo::GetSectorSize 28 Exported Function
CDriveInfo::ContainsDrive 14 Exported Function
CDriveInfo::GetDrive 24 Exported Function
CDriveInfo::CDriveInfo 1 Exported Function
CFullPath::CFullPath 2 Exported Function
CAllocStorageVariant::ResetType 53 Exported Function
PerfmonIDXOpen 85 Exported Function
PerfmonOpen 86 Exported Function
CFullPropSpec::CFullPropSpec 3 Exported Function
public: __thiscall CPidLookupTable::~CPidLookupTable(void) 11 Exported Function
CUnNormalizer::CUnNormalizer 6 Exported Function
CPidLookupTable::CPidLookupTable 5 Exported Function
CiStorage::CiStorage 7 Exported Function
CMemSerStream::CMemSerStream 4 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: TQUERY.dll
  • Product Name: Windows Search
  • Company Name: Microsoft Corporation
  • File Version: 7.0.19041.488 (WinBuild.160101.0800)
  • Product Version: 7.0.19041.488
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/cdb5e3fe741bbc218fb87b2138d32b4860486dc4701e3d18a2b53465ed973040/detection/

MIT License. Copyright (c) 2020-2021 Strontic.