tquery.dll

File Path: C:\Windows\system32\tquery.dll
Description: Microsoft Tripoli Query

Hashes

Type	Hash
MD5	`E84077E2B068376EFF353AFC0B39DF46`
SHA1	`7FE82940AE662EFE9BF8B7CA02717D847F68AE5F`
SHA256	`49F6E0EA05D4D92AC86E49F76D4D3D933D065E2819E9AD4DB519A3A7698260E4`
SHA384	`A4BF8CE69B38A883DF58AD77BB34AE8EEDF44E95753891CFB7901416DB536DF45FD143CA366F9DAD5ABF62D8C15983C4`
SHA512	`F3C66B0B945FA0F1CF5F08295B337CDA094328CE888CAF094CEE06710A2A60161ECAD44B6C6303114F41F1340A66BEB669B8FBF773D77AB6FD0B7945E4B98752`
SSDEEP	`49152:PnKFNo6qkVXWAKLudkpXH7DCEqpgLZ1oqyknZoz+bmkfUHPLWyNkMGrEz6p80twm:CFNnw3NfCFw+KmfvLWJMGyEQ`
IMP	`4B8BDD70EEAFC3E0BCFD8959F5A11527`
PESHA1	`4FA5BEA1DE85A3912D2CA7228D349BD6B71FC77C`
PE256	`F7053748824A960889604563E7D3CAAA871495B7C57A6726E8D49A30199C117E`

DLL Exports:

Function Name	Ordinal	Type
`CMemDeSerStream::SkipByte`	311	Exported Function
`CMemDeSerStream::SkipChar`	312	Exported Function
`CMemDeSerStream::SkipBlob`	310	Exported Function
`CMemDeSerStream::GetGUID`	280	Exported Function
`CMemDeSerStream::GetWChar`	286	Exported Function
`CMemDeSerStream::SkipDouble`	313	Exported Function
`CMemDeSerStream::SkipULong`	317	Exported Function
`CMemDeSerStream::SkipUShort`	318	Exported Function
`CMemDeSerStream::SkipLong`	316	Exported Function
`CMemDeSerStream::SkipFloat`	314	Exported Function
`CMemDeSerStream::SkipGUID`	315	Exported Function
`CMemDeSerStream::GetLong`	281	Exported Function
`CMemDeSerStream::GetByte`	274	Exported Function
`CMemDeSerStream::GetFloat`	279	Exported Function
`CMemDeSerStream::GetString`	283	Exported Function
`CMemDeSerStream::GetDouble`	277	Exported Function
`CMemDeSerStream::GetULong`	284	Exported Function
`CMemDeSerStream::GetBlob`	273	Exported Function
`CMemDeSerStream::GetChar`	275	Exported Function
`CMemDeSerStream::GetUShort`	285	Exported Function
`CMemDeSerStream::PeekULong`	292	Exported Function
`CMemDeSerStream::GetWString`	287	Exported Function
`CDriveInfo::GetDiskSpace`	276	Exported Function
`CFullPath::MakePath`	291	Exported Function
`CCiFile::Read`	306	Exported Function
`CMemSerStream::PutWChar`	303	Exported Function
`CMemSerStream::PutWString`	304	Exported Function
`CFullPropSpec::SetProperty`	309	Exported Function
`RetailTracerReleaseAll`	341	Exported Function
`UseLowFragmentationHeap`	321	Exported Function
`RetailTracerEnable`	340	Exported Function
`CUnNormalizer::UnNormalizeKey`	320	Exported Function
`RetailTracerDisable`	339	Exported Function
`CMemSerStream::PutChar`	295	Exported Function
`CMemSerStream::PutDouble`	296	Exported Function
`CMemSerStream::PutByte`	294	Exported Function
`CMemDeSerStream::SkipWChar`	319	Exported Function
`CMemSerStream::PutBlob`	293	Exported Function
`CMemSerStream::PutFloat`	297	Exported Function
`CMemSerStream::PutULong`	301	Exported Function
`CMemSerStream::PutUShort`	302	Exported Function
`CMemSerStream::PutString`	300	Exported Function
`CMemSerStream::PutGUID`	298	Exported Function
`CMemSerStream::PutLong`	299	Exported Function
`public: virtual __cdecl CPhysStorage::~CPhysStorage(void) __ptr64`	264	Exported Function
`ExceptInitialize`	272	Exported Function
`ExternPropagateEventToOpenQueries`	331	Exported Function
`DllUnregisterServer`	330	Exported Function
`DllGetClassObject`	328	Exported Function
`DllRegisterServer`	329	Exported Function
`ForceMasterMerge`	332	Exported Function
`PerfmonIDXCollect`	336	Exported Function
`PerfmonIDXOpen`	337	Exported Function
`PerfmonIDXClose`	335	Exported Function
`PerfmonClose`	333	Exported Function
`PerfmonCollect`	334	Exported Function
`ciNew`	323	Exported Function
`ciNewNoThrow`	324	Exported Function
`ciDelete`	322	Exported Function
`AccessDebugTracer`	325	Exported Function
`AccessRetailTracer`	326	Exported Function
`CIState`	267	Exported Function
`CreateSecurityStoreStorage`	271	Exported Function
`DllCanUnloadNow`	327	Exported Function
`CreatePropMapperStorage2`	269	Exported Function
`class CCoTaskAllocator CoTaskAllocator`	253	Exported Function
`CreatePropMapperStorage`	270	Exported Function
`CDriveInfo::IsWriteProtected`	290	Exported Function
`CFullPropSpec::SetProperty`	308	Exported Function
`CDriveInfo::IsSameDrive`	289	Exported Function
`XAct::XAct`	261	Exported Function
`CiStorage::QueryPidLookupTable`	305	Exported Function
`CPidLookupTable::Init`	288	Exported Function
`public: virtual __cdecl CiStorage::~CiStorage(void) __ptr64`	266	Exported Function
`public: virtual __cdecl CMemSerStream::~CMemSerStream(void) __ptr64`	263	Exported Function
`CDriveInfo::GetSectorSize`	282	Exported Function
`CDriveInfo::ContainsDrive`	268	Exported Function
`CDriveInfo::GetDrive`	278	Exported Function
`CDriveInfo::CDriveInfo`	254	Exported Function
`CFullPath::CFullPath`	255	Exported Function
`CAllocStorageVariant::ResetType`	307	Exported Function
`PerfmonOpen`	338	Exported Function
`protected: __cdecl CAllocStorageVariant::~CAllocStorageVariant(void) __ptr64`	262	Exported Function
`CFullPropSpec::CFullPropSpec`	256	Exported Function
`public: __cdecl CPidLookupTable::~CPidLookupTable(void) __ptr64`	265	Exported Function
`CUnNormalizer::CUnNormalizer`	259	Exported Function
`CPidLookupTable::CPidLookupTable`	258	Exported Function
`CiStorage::CiStorage`	260	Exported Function
`CMemSerStream::CMemSerStream`	257	Exported Function

Signature

Status: Signature verified.
Serial: 3300000266BD1580EFA75CD6D3000000000266
Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: TQUERY.dll.mui
Product Name: Windows Search
Company Name: Microsoft Corporation
File Version: 7.0.19041.1 (WinBuild.160101.0800)
Product Version: 7.0.19041.1
Language: English (United States)
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/70
VirusTotal Link: https://www.virustotal.com/gui/file/49f6e0ea05d4d92ac86e49f76d4d3d933d065e2819e9ad4db519a3a7698260e4/detection/