Gridinsoft Logo

The tquery.dll (Microsoft Tripoli Query) File Analysis

Updated 2 months ago
Checked by Malaware Check
tquery.dll

Technical Analysis

File Name tquery.dll
File Type
PE32+ executable (DLL) (console) x86-64, for MS Windows
Scanner Version 1.0.210.174
Database Version 2025-03-11 04:00:40 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
3,231,744
File Size (bytes)
2025-03-11
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
5b2a32417278418c4f00e05d6b043286
SHA1
b885cb96d2de27ebaf69554b21e50978ed974ef8
SHA256
2b6acda1355498e5fd864245f5a2678f27610167e6ec1b0e827ac84eddc6f5eb
SHA512
0e4dfcd1115ff5fedb02bf199707c150dbf52aa0e630b5cfc95157f2de9a0526f83cd95a78a0fd264227846aff92313c82ea39b56f43155253700aa7883f11f1
ImpHash
c168b047f85c0e1c9d1db1cb8ee3efb0

PE Analysis

Basic Information

▼
Image Base 0x180000000
Entry Point 0x1801581c0
Compilation Time 2019-01-25 20:19:19
Checksum 0x00320c14 (Actual: 0x00320c14)
OS Version 10.0
PEiD Signatures PE32+ executable (DLL) (console) x86-64, for MS Windows
PDB Path tquery.pdb
Digital Signature No valid SignedData structure was found.
Imports 58 libraries
Exports 69 functions
Resources 2 Resources
Sections 8 Sections

Version Information

▼
CompanyName Microsoft Corporation
FileDescription Microsoft Tripoli Query
FileVersion 7.0.26100.3323 (WinBuild.160101.0800)
InternalName TQUERY.dll
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename TQUERY.dll
ProductName Windows® Search
ProductVersion 7.0.26100.3323
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 2,480,092 bytes 2,482,176 bytes 6.34 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 3EFFE9DA95307F8496766E4A73635B4F
fothk 0x0025f000 4,096 bytes 4,096 bytes 0.02 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ A4C6CFA0C3D8B509ADA2E2B8BCAA422B
.rdata 0x00260000 574,758 bytes 577,536 bytes 5.22 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 18DEF23761089A66A11C62451AF5CE83
.data 0x002ed000 26,912 bytes 20,480 bytes 4.07 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 594B3F3C334664313D1BF68627CF9674
.pdata 0x002f4000 116,400 bytes 118,784 bytes 6.19 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 8EC2B51302C4D5F4D766665369E5BB39
.didat 0x00311000 968 bytes 4,096 bytes 1.01 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 905610B64B85CAB2429C2822D279B264
.rsrc 0x00312000 1,288 bytes 4,096 bytes 1.31 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 28AB936850DDB870AAC8B4A23A67DAA7
.reloc 0x00313000 13,912 bytes 16,384 bytes 5.13 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 39B53FACED1EB6C6A02E3A10944FBE34

Resource Analysis

▼
Total Resources: 2 (1,112 bytes)
Resource Type Count Total Size Percentage
MUI 1 240 bytes
21.6%
RT_VERSION 1 872 bytes
78.4%

Certificate Chain Analysis

▼
Certificate Information
Product Windows® Search
Description Microsoft Tripoli Query
File Version 7.0.26100.3323 (WinBuild.160101.0800)
Original Name TQUERY.dll
Internal Name TQUERY.dll
Copyright © Microsoft Corporation. All rights reserved.

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware