| Windows 8 DLL File Information - QAGENTRT.DLL |
The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 8, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.
General Information
| File Description: | Quarantine Agent Service Run-Time |
| File Version: | 6.2.9200.16384 (win8_rtm.120725-1247) |
| Company: | Microsoft Corporation |
| Product Name: | Microsoft® Windows® Operating System |
| DLL popularity | Very Low - There is no any other DLL in system32 directory that is statically linked to this file. |
| File Size: | 311 KB |
| Total Number of Exported Functions: | 5 |
| Total Number of Exported Functions With Names: | 5 |
Section Headers
| Name | Virtual Address | Raw Data Size | % of File | Characteristics | Section Contains... |
|---|---|---|---|---|---|
| .text | 0x00001000 | 265,216 Bytes | 83.3% | Read, Execute | Code |
| .data | 0x00042000 | 6,656 Bytes | 2.1% | Write, Read | Initialized Data |
| .idata | 0x00045000 | 5,120 Bytes | 1.6% | Read | Initialized Data |
| .rsrc | 0x00047000 | 16,896 Bytes | 5.3% | Read | Initialized Data |
| .reloc | 0x0004c000 | 23,552 Bytes | 7.4% | Read, Discardable | Initialized Data |
Static Linking
QAGENTRT.DLL is statically linked to the following files:msvcrt.dll
ntdll.dll
api-ms-win-core-errorhandling-l1-1-1.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-interlocked-l1-2-0.dll
api-ms-win-core-registry-l1-1-0.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-string-l1-1-0.dll
KERNEL32.dll
QUtil.dll
USERENV.dll
DNSAPI.dll
This means that when QAGENTRT.DLL is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, QAGENTRT.DLL won't be loaded.
General Resources Information
| Resource Type | Number of Items | Total Size | % of File |
|---|---|---|---|
| Icons | 0 | 0 Bytes | 0.0% |
| Animated Icons | 0 | 0 Bytes | 0.0% |
| Cursors | 0 | 0 Bytes | 0.0% |
| Animated Cursors | 0 | 0 Bytes | 0.0% |
| Bitmaps | 0 | 0 Bytes | 0.0% |
| AVI Files | 0 | 0 Bytes | 0.0% |
| Dialog-Boxes | 0 | 0 Bytes | 0.0% |
| HTML Related Files | 0 | 0 Bytes | 0.0% |
| Menus | 0 | 0 Bytes | 0.0% |
| Strings | 34 | 2,504 Bytes | 0.8% |
| Type Libraries | 0 | 0 Bytes | 0.0% |
| Manifest | 0 | 0 Bytes | 0.0% |
| All Others | 5 | 33,467 Bytes | 10.5% |
| Total | 39 | 35,971 Bytes | 11.3% |
Icons in this file
No icons found in this file
Cursors in this file
No cursors found in this file
Dialog-boxes list (up to 200 dialogs)
No dialog resources in this file.
String resources in this dll (up to 200 strings)
| String ID | String Text |
|---|---|
| 1 | Quarantine Agent Service Run-Time |
| 6 | Network Access Protection Agent |
| 7 | The Network Access Protection (NAP) agent service collects and manages health information for client computers on a network. Information collected by NAP agent is used to make sure that the client computer has the required software and settings. If a client computer is not compliant with health policy, it can be provided with restricted network access until its configuration is updated. Depending on the configuration of health policy, client computers might be automatically updated so that users quickly regain full network access without having to manually update their computer. |
| 8 | Microsoft Corporation |
| 9 | Launches the Network Access Protection Status UI |
| 10 | System Health Authentication |
| 1001 | Enabled |
| 1002 | Disabled |
| 1005 | Restricted Access |
| 1006 | Full Access |
| 1007 | In Probation |
| 1008 | None |
| 1009 | Other Failure |
| 1010 | Client Component Failure |
| 1011 | Client Communication Failure |
| 1012 | Server Component Failure |
| 1013 | Server Communication Failure |
| 1014 | Unknown |
| 1015 | Not Supported |
| 1016 | Success |
| 1017 | In Progress |
| 1018 | Could Not Update |
| 1019 | Invalid packet |
| 1020 | SHV did not return an SOH response |
| 1021 | SHV timed out on request |
| 1022 | NAPAgent has stopped |
| 1023 | NapAgent is Active |
| 1032 | Transition |
| 1033 | Infected |
| 1034 | Unknown |
| 1035 | No Data |
| 1064 | SHV could not find the setting used in the policy |
COM Classes/Interfaces
There is no type library in this file with COM classes/interfaces information
Exported Functions List
The following functions are exported by this dll:| DllCanUnloadNow | DllGetClassObject | DllRegisterServer | DllUnregisterServer |
| ServiceMain |
Imported Functions List
The following functions are imported by this dll:- msvcrt.dll:
_CxxThrowException _XcptFilter __CxxFrameHandler __RTtypeid __dllonexit _amsg_exit _errno _except_handler4_common _initterm _lock _onexit _purecall _unlock _vsnwprintf free malloc memcmp memcpy memcpy_s memmove memmove_s memset public: __thiscall exception::exception(char const * const &) public: __thiscall exception::exception(class exception const &) public: __thiscall exception::exception(void) public: char const * __thiscall type_info::name(void)const public: virtual __thiscall exception::~exception(void) public: virtual __thiscall type_info::~type_info(void) public: virtual char const * __thiscall exception::what(void)const realloc towlower void __cdecl terminate(void) wcsncpy_s wcsrchr - ntdll.dll:
DbgPrint EtwEventEnabled EtwEventRegister EtwEventUnregister EtwEventWrite EtwGetTraceEnableFlags EtwGetTraceEnableLevel EtwGetTraceLoggerHandle EtwRegisterTraceGuidsW EtwTraceMessage EtwUnregisterTraceGuids RtlIpv4AddressToStringW RtlIpv6AddressToStringW RtlNtStatusToDosError - api-ms-win-core-errorhandling-l1-1-1.dll:
KernelBase!GetLastError KernelBase!RaiseException KernelBase!SetUnhandledExceptionFilter KernelBase!UnhandledExceptionFilter - api-ms-win-core-handle-l1-1-0.dll:
KernelBase!CloseHandle - api-ms-win-core-interlocked-l1-2-0.dll:
KernelBase!InterlockedCompareExchange KernelBase!InterlockedDecrement KernelBase!InterlockedExchange KernelBase!InterlockedIncrement - api-ms-win-core-registry-l1-1-0.dll:
KernelBase!RegCloseKey KernelBase!RegCreateKeyExW KernelBase!RegDeleteValueW KernelBase!RegEnumKeyExW KernelBase!RegOpenKeyExW KernelBase!RegQueryInfoKeyW KernelBase!RegSetValueExW - api-ms-win-core-profile-l1-1-0.dll:
ntdll!RtlQueryPerformanceCounter - api-ms-win-core-string-l1-1-0.dll:
KernelBase!CompareStringW KernelBase!MultiByteToWideChar KernelBase!WideCharToMultiByte - KERNEL32.dll:
CreateEventW CreateSemaphoreW CreateThread CreateTimerQueue CreateTimerQueueTimer CreateWaitableTimerW DebugBreak DelayLoadFailureHook DeleteTimerQueueEx DeleteTimerQueueTimer DisableThreadLibraryCalls ExpandEnvironmentStringsW FileTimeToSystemTime FindResourceExW FindResourceW FreeLibrary GetComputerNameExW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetExitCodeThread GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetProcAddress GetProcessHeap GetSystemInfo GetSystemTimeAsFileTime GetTickCount GetTickCount64 GetVersionExW HeapCreate HeapDestroy HeapFree IdnToAscii InitializeCriticalSectionAndSpinCount InterlockedExchangeAdd IsDebuggerPresent LoadLibraryExW LoadLibraryW LoadResource LocalFree LockResource MoveFileExW OutputDebugStringA QueueUserWorkItem RegDeleteKeyExW RegDeleteTreeW RegLoadMUIStringW RegNotifyChangeKeyValue RegQueryValueExW RegisterWaitForSingleObject ReleaseSemaphore ResetEvent ResumeThread SetEvent SetWaitableTimer SizeofResource Sleep TerminateProcess UnregisterWaitEx WaitForMultipleObjects WaitForSingleObject lstrcmpiW ntdll!LdrResolveDelayLoadedAPI ntdll!RtlAllocateHeap ntdll!RtlDeleteCriticalSection ntdll!RtlEnterCriticalSection ntdll!RtlInitializeCriticalSection ntdll!RtlLeaveCriticalSection ntdll!RtlReAllocateHeap ntdll!RtlSizeHeap - QUtil.dll:
FreeNetworkSoH - USERENV.dll:
EnterCriticalPolicySection LeaveCriticalPolicySection RegisterGPNotification UnregisterGPNotification - DNSAPI.dll:
DnsFree DnsQueryConfig DnsQuery_W