IQueryString.dll

Library on Windows 4 known copies with hashes

Is it the real IQueryString.dll?

file version info and known copies

Installed inC:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\UIAVerify\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\UIAVerify\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\UIAVerify\

Signed byMicrosoft Windows Kits Publisher

ProductMicrosoft (R) Windows (R) Operating System, Microsoft Corporation

4 known copies

10.0.10011.16384 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\UIAVerify\IQueryString.dll · signed by Microsoft Windows Kits Publisher

0acc09f88dee0527a971e2e13716eed3415be59d79ae9cff7e68a5ac74bb6362

10.0.10011.16384 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\UIAVerify\IQueryString.dll · signed by Microsoft Corporation

0d698e5a5356a2d0e8dc78d7b48507f536a57e0d662b353d59c802f66e3da109

10.0.10011.16384 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\UIAVerify\IQueryString.dll · signed by Microsoft Windows Kits Publisher

58cf0f2b7c8b3dbb6cb0d3a29b73223d1738f8df1d0b8a11680d16e009b0a58e

10.0.10011.16384 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\UIAVerify\IQueryString.dll · signed by Microsoft Corporation

6dc16e79033554347c0aa296fa845c4b3bcdcbeaa1c697087dd87e9f753d9005

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.