¿Para qué sirve la dll Query.dll?

Content Index Utility DLL

Dependencias de la dll Query.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\Query.dll

File Type: DLL

  Image has the following dependencies:

    msvcrt.dll
    api-ms-win-core-synch-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-0.dll
    api-ms-win-core-rtlsupport-l1-1-0.dll
    api-ms-win-core-registry-l1-1-0.dll
    api-ms-win-core-sysinfo-l1-1-0.dll
    api-ms-win-core-libraryloader-l1-2-1.dll
    api-ms-win-core-registry-l2-1-0.dll
    api-ms-win-core-libraryloader-l1-2-0.dll
    api-ms-win-core-errorhandling-l1-1-0.dll
    ntdll.dll
    api-ms-win-core-synch-l1-2-0.dll
    api-ms-win-core-profile-l1-1-0.dll
    api-ms-win-core-com-l1-1-0.dll
    api-ms-win-core-shlwapi-legacy-l1-1-0.dll
    api-ms-win-core-localization-l1-2-0.dll
    api-ms-win-core-heap-l1-1-0.dll
    api-ms-win-core-debug-l1-1-0.dll
    api-ms-win-core-handle-l1-1-0.dll
    api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
    api-ms-win-core-string-l1-1-0.dll
    api-ms-win-core-file-l1-1-0.dll
    api-ms-win-core-memory-l1-1-0.dll
    api-ms-win-core-io-l1-1-0.dll
    api-ms-win-eventing-provider-l1-1-0.dll
    api-ms-win-core-heap-l2-1-0.dll

  Summary

        4000 .data
        1000 .pdata
        8000 .rdata
        1000 .reloc
        1000 .rsrc
        F000 .text

Funciones que tiene la dll Query.dll


3    0 00009000 BindIFilterFromStorage
4    1 00009100 BindIFilterFromStream
5    2 00002770 DllCanUnloadNow
6    3 00001440 DllGetClassObject
7    4 00008C10 DllRegisterServer
8    5 00008D70 DllUnregisterServer
1    6 00008F00 LoadBinaryFilter
9    7 00009200 LoadIFilter
10    8 00009300 LoadIFilterEx
2    9 00008F80 LoadTextFilter

Información avanzada sobre funciones que tiene la dll Query.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\Query.dll

File Type: DLL

  Section contains the following exports for query.dll

    00000000 characteristics
    6A3EE124 time date stamp
        0.00 version
           1 ordinal base
          10 number of functions
          10 number of names

    ordinal hint RVA      name

          3    0 00009000 BindIFilterFromStorage
          4    1 00009100 BindIFilterFromStream
          5    2 00002770 DllCanUnloadNow
          6    3 00001440 DllGetClassObject
          7    4 00008C10 DllRegisterServer
          8    5 00008D70 DllUnregisterServer
          1    6 00008F00 LoadBinaryFilter
          9    7 00009200 LoadIFilter
         10    8 00009300 LoadIFilterEx
          2    9 00008F80 LoadTextFilter

  Summary

        4000 .data
        1000 .pdata
        8000 .rdata
        1000 .reloc
        1000 .rsrc
        F000 .text

Integridad de la dll Query.dll



Algorithm       Hash                                                                   Path                                         
---------       ----                                                                   ----                                         
SHA256          8E067D7A7C3DA1DC4495CCE082D0E3AFC1C704542DB940C38092E8761CB702D1       C:\Windows\System32\Query.dll                


Detalles sobre el fichero dll Query.dll




PSPath            : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\Query.dll
PSParentPath      : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName       : Query.dll
PSDrive           : C
PSProvider        : Microsoft.PowerShell.Core\FileSystem
PSIsContainer     : False
Mode              : -a----
VersionInfo       : File:             C:\Windows\System32\Query.dll
                    InternalName:     query.dll
                    OriginalFilename: query.dll.mui
                    FileVersion:      10.0.19041.561 (WinBuild.160101.0800)
                    FileDescription:  Content Index Utility DLL
                    Product:          Sistema operativo Microsoft® Windows®
                    ProductVersion:   10.0.19041.561
                    Debug:            False
                    Patched:          False
                    PreRelease:       False
                    PrivateBuild:     False
                    SpecialBuild:     False
                    Language:         Español (España, internacional)
                    
BaseName          : Query
Target            : {C:\Windows\WinSxS\amd64_microsoft-windows-c..ent-indexing-common_31bf3856ad364e35_10.0.19041.1_none_bca51b4e766
                    dd871\Query.dll}
LinkType          : HardLink
Name              : Query.dll
Length            : 110592
DirectoryName     : C:\Windows\System32
Directory         : C:\Windows\System32
IsReadOnly        : False
Exists            : True
FullName          : C:\Windows\System32\Query.dll
Extension         : .dll
CreationTime      : 07/12/2019 10:08:27
CreationTimeUtc   : 07/12/2019 9:08:27
LastAccessTime    : 03/12/2020 14:27:43
LastAccessTimeUtc : 03/12/2020 13:27:43
LastWriteTime     : 07/12/2019 10:08:27
LastWriteTimeUtc  : 07/12/2019 9:08:27
Attributes        : Archive



Procesos que utilizan la dll Query.dll


explorer
RuntimeBroker
RuntimeBroker
RuntimeBroker
RuntimeBroker
SearchApp
sihost
SpeechRuntime
svchost