microsoft.win32.search.query.dll

Microsoft.Win32.Search.Query file version info

Library on Windows 4 known copies with hashes

Is it the real microsoft.win32.search.query.dll?

file version info and known copies

Installed inC:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\

Signed byMicrosoft Windows Kits Publisher

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionMicrosoft.Win32.Search.Query

4 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\microsoft.win32.search.query.dll · signed by Microsoft Windows Kits Publisher

663da5ea624ab739ea27da533ce8c7c0482b83d0399e064e65246983850c5438

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\microsoft.win32.search.query.dll · signed by Microsoft Corporation

81eb34a8f8117698366b63c3c42481e6c35569a7e987be762104a8d2c8ecf26a

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\microsoft.win32.search.query.dll · signed by Microsoft Windows Kits Publisher

93dd40f9d37559e2d5ef362e6f8a5c23eb8d949ecfa0988e5994e70f07370ce1

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\microsoft.win32.search.query.dll · signed by Microsoft Corporation

bfcf2cbece942063c803a23d56a95da9127d8e780d8bcca2b3ec0e5618776840

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.