¿Para qué sirve la dll mssrch.dll?

Microsoft Embedded Search

Dependencias de la dll mssrch.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\mssrch.dll

File Type: DLL

  Image has the following dependencies:

    msvcrt.dll
    TQUERY.DLL
    api-ms-win-core-libraryloader-l1-2-0.dll
    api-ms-win-core-synch-l1-1-0.dll
    api-ms-win-core-heap-l1-1-0.dll
    api-ms-win-core-errorhandling-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-0.dll
    api-ms-win-core-com-l1-1-0.dll
    api-ms-win-core-heap-l2-1-0.dll
    api-ms-win-core-localization-l1-2-0.dll
    api-ms-win-core-debug-l1-1-0.dll
    api-ms-win-core-handle-l1-1-0.dll
    OLEAUT32.dll
    api-ms-win-core-registry-l1-1-0.dll
    api-ms-win-core-string-l1-1-0.dll
    api-ms-win-core-file-l1-1-0.dll
    api-ms-win-core-kernel32-legacy-l1-1-0.dll
    api-ms-win-core-threadpool-l1-2-0.dll
    api-ms-win-core-string-l2-1-0.dll
    api-ms-win-core-synch-l1-2-0.dll
    ntdll.dll
    api-ms-win-core-string-obsolete-l1-1-0.dll
    api-ms-win-core-sysinfo-l1-1-0.dll
    api-ms-win-shell-shdirectory-l1-1-0.dll
    api-ms-win-core-sysinfo-l1-2-0.dll
    api-ms-win-core-kernel32-legacy-l1-1-1.dll
    api-ms-win-core-processenvironment-l1-1-0.dll
    api-ms-win-core-psapi-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-1.dll
    api-ms-win-core-file-l1-2-0.dll
    api-ms-win-core-localization-obsolete-l1-2-0.dll
    api-ms-win-core-rtlsupport-l1-1-0.dll
    api-ms-win-core-profile-l1-1-0.dll
    api-ms-win-core-path-l1-1-0.dll
    api-ms-win-core-version-l1-1-0.dll
    api-ms-win-core-shlwapi-legacy-l1-1-0.dll
    api-ms-win-core-memory-l1-1-0.dll
    api-ms-win-core-timezone-l1-1-0.dll
    api-ms-win-core-datetime-l1-1-0.dll
    api-ms-win-core-registry-l2-1-0.dll
    api-ms-win-eventing-provider-l1-1-0.dll
    api-ms-win-core-apiquery-l1-1-0.dll
    api-ms-win-core-file-l2-1-0.dll
    api-ms-win-shcore-stream-l1-1-0.dll
    api-ms-win-core-io-l1-1-0.dll
    cryptdll.dll
    api-ms-win-core-privateprofile-l1-1-0.dll
    api-ms-win-core-heap-obsolete-l1-1-0.dll
    api-ms-win-core-libraryloader-l1-2-1.dll
    api-ms-win-shell-namespace-l1-1-0.dll
    api-ms-win-core-synch-l1-2-1.dll
    api-ms-win-security-trustee-l1-1-1.dll
    api-ms-win-core-debug-l1-1-1.dll
    api-ms-win-core-memory-l1-1-1.dll
    api-ms-win-shcore-taskpool-l1-1-0.dll
    api-ms-win-core-wow64-l1-1-1.dll
    api-ms-win-core-processthreads-l1-1-2.dll
    api-ms-win-core-threadpool-legacy-l1-1-0.dll
    ESENT.dll
    api-ms-win-core-delayload-l1-1-1.dll
    api-ms-win-core-delayload-l1-1-0.dll
    api-ms-win-core-util-l1-1-0.dll
    api-ms-win-shcore-obsolete-l1-1-0.dll
    api-ms-win-core-job-l2-1-0.dll
    api-ms-win-core-winrt-l1-1-0.dll
    api-ms-win-core-file-l2-1-1.dll
    api-ms-win-core-wow64-l1-1-0.dll

  Image has the following delay load dependencies:

    ext-ms-win-advapi32-eventlog-l1-1-0.dll
    ext-ms-win-wer-reporting-l1-1-0.dll
    api-ms-win-core-debug-minidump-l1-1-0.dll
    api-ms-win-security-base-l1-1-0.dll
    api-ms-win-service-management-l2-1-0.dll
    api-ms-win-service-management-l1-1-0.dll
    api-ms-win-security-sddl-l1-1-0.dll
    PROPSYS.dll
    ext-ms-win-shell32-shellfolders-l1-1-0.dll
    api-ms-win-shcore-registry-l1-1-0.dll
    api-ms-win-power-setting-l1-1-0.dll
    api-ms-win-service-core-l1-1-1.dll
    api-ms-win-service-winsvc-l1-1-0.dll
    api-ms-win-security-lsalookup-l2-1-0.dll
    ext-ms-win-resourcemanager-crm-l1-2-0.dll
    ext-ms-win-fs-vssapi-l1-1-0.dll
    ext-ms-win-devmgmt-policy-l1-1-0.dll
    ext-ms-win-ntuser-windowstation-l1-1-0.dll
    ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll
    ext-ms-win-rtcore-ntuser-synch-ext-l1-1-0.dll
    ext-ms-win-session-wtsapi32-l1-1-0.dll
    ext-ms-win-session-usertoken-l1-1-0.dll
    ext-ms-win-els-elscore-l1-1-0.dll
    ext-ms-win-session-usermgr-l1-1-0.dll
    ext-ms-win-shell-shell32-l1-2-2.dll
    api-ms-win-shlwapi-winrt-storage-l1-1-1.dll
    api-ms-win-security-capability-l1-1-0.dll
    api-ms-win-appmodel-runtime-l1-1-1.dll
    api-ms-win-security-provider-l1-1-0.dll
    api-ms-win-power-setting-l1-1-1.dll
    CRYPT32.dll
    USERENV.dll
    api-ms-win-core-winrt-string-l1-1-0.dll
    RPCRT4.dll
    SystemEventsBrokerClient.dll
    Bcp47Langs.dll
    efswrt.dll
    ext-ms-win-kernel32-package-l1-1-0.dll
    ext-ms-win-rtcore-ntuser-cursor-l1-1-0.dll
    MPR.dll
    api-ms-win-ntuser-sysparams-l1-1-0.dll

  Summary

        6000 .data
        1000 .didat
       1E000 .pdata
       BF000 .rdata
        5000 .reloc
        E000 .rsrc
      1E7000 .text

Funciones que tiene la dll mssrch.dll


1    0 00120E60 [email protected]@[email protected]@@Z
2    1 000B58C0 [email protected]@[email protected]
3    2 0008DF20 [email protected]@[email protected]
4    3 001220E0 [email protected]@[email protected]@@Z
5    4 001F1AA8 [email protected]@[email protected]
6    5 0008E210 [email protected]@@SAXXZ
7    6 000502B0 [email protected]@[email protected]@[email protected]@@@[email protected]@XZ
8    7 0012EA30 [email protected]@@UEAAJXZ
9    8 0009DF10 [email protected]@@[email protected]@@[email protected]@@@[email protected]@@[email protected]@@Z
10    9 000C5360 [email protected]@@[email protected]
11    A 000C4C40 [email protected]@@[email protected]
12    B 000C3530 [email protected]@@UEAAJXZ
13    C 000C41E0 [email protected]@@[email protected]@@Z
14    D 00084960 [email protected]@@UEAAJXZ
15    E 000BBEA0 [email protected]@@UEAAJXZ
16    F 000849E0 [email protected]@@[email protected]
17   10 00075120 DllCanUnloadNow
18   11 00077CE0 DllGetClassObject
19   12 0012D2A0 DllRegisterServer
20   13 0012D310 DllUnregisterServer
21   14 0012D320 GetCatalogManager
22   15 00132080 MSSrch_SysPrep_Cleanup

Información avanzada sobre funciones que tiene la dll mssrch.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\mssrch.dll

File Type: DLL

  Section contains the following exports for MSSRCH.DLL

    00000000 characteristics
    C96B3028 time date stamp
        0.00 version
           1 ordinal base
          22 number of functions
          22 number of names

    ordinal hint RVA      name

          1    0 00120E60 [email protected]@[email protected]@@Z
          2    1 000B58C0 [email protected]@[email protected]
          3    2 0008DF20 [email protected]@[email protected]
          4    3 001220E0 [email protected]@[email protected]@@Z
          5    4 001F1AA8 [email protected]@[email protected]
          6    5 0008E210 [email protected]@@SAXXZ
          7    6 000502B0 [email protected]@[email protected]@[email protected]@@@[email protected]@XZ
          8    7 0012EA30 [email protected]@@UEAAJXZ
          9    8 0009DF10 [email protected]@@[email protected]@@[email protected]@@@[email protected]@@[email protected]@@Z
         10    9 000C5360 [email protected]@@[email protected]
         11    A 000C4C40 [email protected]@@[email protected]
         12    B 000C3530 [email protected]@@UEAAJXZ
         13    C 000C41E0 [email protected]@@[email protected]@@Z
         14    D 00084960 [email protected]@@UEAAJXZ
         15    E 000BBEA0 [email protected]@@UEAAJXZ
         16    F 000849E0 [email protected]@@[email protected]
         17   10 00075120 DllCanUnloadNow
         18   11 00077CE0 DllGetClassObject
         19   12 0012D2A0 DllRegisterServer
         20   13 0012D310 DllUnregisterServer
         21   14 0012D320 GetCatalogManager
         22   15 00132080 MSSrch_SysPrep_Cleanup

  Summary

        6000 .data
        1000 .didat
       1E000 .pdata
       BF000 .rdata
        5000 .reloc
        E000 .rsrc
      1E7000 .text

Integridad de la dll mssrch.dll



Algorithm       Hash                                                                   Path                                         
---------       ----                                                                   ----                                         
SHA256          6C2BCE8C9A26B59069D2344E7475A95150A2A478CA450893415519E75EB43C1F       C:\Windows\System32\mssrch.dll               


Detalles sobre el fichero dll mssrch.dll




PSPath            : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\mssrch.dll
PSParentPath      : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName       : mssrch.dll
PSDrive           : C
PSProvider        : Microsoft.PowerShell.Core\FileSystem
PSIsContainer     : False
Mode              : -a----
VersionInfo       : File:             C:\Windows\System32\mssrch.dll
                    InternalName:     MSSRCH.dll
                    OriginalFilename: MSSRCH.dll.mui
                    FileVersion:      7.0.19041.561 (WinBuild.160101.0800)
                    FileDescription:  Microsoft Embedded Search
                    Product:          Windows® Search
                    ProductVersion:   7.0.19041.561
                    Debug:            False
                    Patched:          False
                    PreRelease:       False
                    PrivateBuild:     False
                    SpecialBuild:     False
                    Language:         Español (España, internacional)
                    
BaseName          : mssrch
Target            : {C:\Windows\WinSxS\amd64_windowssearchengine_31bf3856ad364e35_7.0.19041.610_none_8bfdd10e0c793303\mssrch.dll}
LinkType          : HardLink
Name              : mssrch.dll
Length            : 2979840
DirectoryName     : C:\Windows\System32
Directory         : C:\Windows\System32
IsReadOnly        : False
Exists            : True
FullName          : C:\Windows\System32\mssrch.dll
Extension         : .dll
CreationTime      : 29/11/2020 11:42:12
CreationTimeUtc   : 29/11/2020 10:42:12
LastAccessTime    : 03/12/2020 13:21:59
LastAccessTimeUtc : 03/12/2020 12:21:59
LastWriteTime     : 29/11/2020 11:42:12
LastWriteTimeUtc  : 29/11/2020 10:42:12
Attributes        : Archive



Procesos que utilizan la dll mssrch.dll


sihost