| Windows 8 DLL File Information - QSHVHOST.DLL |
The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 8, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.
General Information
| File Description: | Quarantine SHV Host |
| File Version: | 6.2.9200.16384 (win8_rtm.120725-1247) |
| Company: | Microsoft Corporation |
| Product Name: | Microsoft® Windows® Operating System |
| DLL popularity | Very Low - 2 other DLL files in system32 directory are statically linked to this file. |
| File Size: | 148 KB |
| Total Number of Exported Functions: | 16 |
| Total Number of Exported Functions With Names: | 16 |
Section Headers
| Name | Virtual Address | Raw Data Size | % of File | Characteristics | Section Contains... |
|---|---|---|---|---|---|
| .text | 0x00001000 | 128,512 Bytes | 84.8% | Read, Execute | Code |
| .orpc | 0x00021000 | 512 Bytes | 0.3% | Read, Execute | Code |
| .data | 0x00022000 | 3,072 Bytes | 2.0% | Write, Read | Initialized Data |
| .idata | 0x00024000 | 4,608 Bytes | 3.0% | Read | Initialized Data |
| .rsrc | 0x00026000 | 2,560 Bytes | 1.7% | Read | Initialized Data |
| .reloc | 0x00027000 | 11,264 Bytes | 7.4% | Read, Discardable | Initialized Data |
Static Linking
QSHVHOST.DLL is statically linked to the following files:msvcrt.dll
ntdll.dll
KERNEL32.dll
ADVAPI32.dll
ole32.dll
OLEAUT32.dll
USER32.dll
WS2_32.dll
RPCRT4.dll
This means that when QSHVHOST.DLL is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, QSHVHOST.DLL won't be loaded.
List of files that are statically linked to QSHVHOST.DLL
iasnap.dll
iassam.dll
This means that when one of the above files is loaded, QSHVHOST.DLL will be loaded too. (The opposite of the previous 'Static Linking' section)
General Resources Information
| Resource Type | Number of Items | Total Size | % of File |
|---|---|---|---|
| Icons | 0 | 0 Bytes | 0.0% |
| Animated Icons | 0 | 0 Bytes | 0.0% |
| Cursors | 0 | 0 Bytes | 0.0% |
| Animated Cursors | 0 | 0 Bytes | 0.0% |
| Bitmaps | 0 | 0 Bytes | 0.0% |
| AVI Files | 0 | 0 Bytes | 0.0% |
| Dialog-Boxes | 0 | 0 Bytes | 0.0% |
| HTML Related Files | 0 | 0 Bytes | 0.0% |
| Menus | 0 | 0 Bytes | 0.0% |
| Strings | 29 | 1,050 Bytes | 0.7% |
| Type Libraries | 0 | 0 Bytes | 0.0% |
| Manifest | 0 | 0 Bytes | 0.0% |
| All Others | 5 | 2,400 Bytes | 1.6% |
| Total | 34 | 3,450 Bytes | 2.3% |
Icons in this file
No icons found in this file
Cursors in this file
No cursors found in this file
Dialog-boxes list (up to 200 dialogs)
No dialog resources in this file.
String resources in this dll (up to 200 strings)
| String ID | String Text |
|---|---|
| 1 | Quarantine SHV Host |
| 1001 | Enabled |
| 1002 | Disabled |
| 1005 | Restricted Access |
| 1006 | Full Access |
| 1007 | In Probation |
| 1008 | None |
| 1009 | Other Failure |
| 1010 | Client Component Failure |
| 1011 | Client Communication Failure |
| 1012 | Server Component Failure |
| 1013 | Server Communication Failure |
| 1014 | Unknown |
| 1015 | Not Supported |
| 1016 | Success |
| 1017 | In Progress |
| 1018 | Could Not Update |
| 1019 | Invalid packet |
| 1020 | SHV did not return an SOH response |
| 1021 | SHV timed out on request |
| 1022 | NAPAgent has stopped |
| 1023 | NapAgent is Active |
| 1032 | Transition |
| 1033 | Infected |
| 1034 | Unknown |
| 1035 | No Data |
| 1064 | SHV could not find the setting used in the policy |
COM Classes/Interfaces
There is no type library in this file with COM classes/interfaces information
Exported Functions List
The following functions are exported by this dll:| DllCanUnloadNow | DllGetClassObject | DllRegisterServer |
| DllUnregisterServer | QuarCreateSession | QuarDestroySession |
| QuarFreeMemory | QuarInitialize | QuarSessionEvaluateClientMachineHealth |
| QuarSessionGetFixupServerList | QuarSessionGetId | QuarSessionGetMachineInventory |
| QuarSessionGetShvResultList | QuarSessionGetSoHResponse | QuarSessionSetNewQuarantineStatus |
| QuarUninitialize |
Imported Functions List
The following functions are imported by this dll:- msvcrt.dll:
_CxxThrowException _XcptFilter __CxxFrameHandler __RTtypeid __dllonexit _amsg_exit _errno _except_handler4_common _initterm _lock _onexit _unlock _vsnwprintf free malloc memcmp memcpy memcpy_s memmove memmove_s memset public: __thiscall exception::exception(char const * const &) public: __thiscall exception::exception(class exception const &) public: __thiscall exception::exception(void) public: char const * __thiscall type_info::name(void)const public: virtual __thiscall exception::~exception(void) public: virtual __thiscall type_info::~type_info(void) public: virtual char const * __thiscall exception::what(void)const realloc towlower void __cdecl terminate(void) wcsncpy_s wcsrchr - ntdll.dll:
DbgPrint EtwGetTraceEnableFlags EtwGetTraceEnableLevel EtwGetTraceLoggerHandle EtwRegisterTraceGuidsW EtwTraceMessage EtwUnregisterTraceGuids RtlIpv4AddressToStringW RtlIpv6AddressToStringW - KERNEL32.dll:
CloseHandle CreateEventW CreateSemaphoreW CreateTimerQueue CreateTimerQueueTimer DebugBreak DeleteTimerQueueEx DeleteTimerQueueTimer DisableThreadLibraryCalls ExpandEnvironmentStringsW FileTimeToSystemTime FindResourceExW FindResourceW FreeLibrary GetComputerNameExW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetProcAddress GetSystemInfo GetSystemTimeAsFileTime GetThreadLocale GetTickCount GetVersionExW HeapCreate HeapDestroy HeapFree InitializeCriticalSectionAndSpinCount InterlockedCompareExchange InterlockedDecrement InterlockedExchange InterlockedExchangeAdd InterlockedIncrement IsDebuggerPresent LoadLibraryExW LoadResource LockResource MultiByteToWideChar OutputDebugStringA QueryPerformanceCounter QueueUserWorkItem RaiseException RegisterWaitForSingleObject ReleaseSemaphore SetThreadLocale SetUnhandledExceptionFilter SizeofResource Sleep TerminateProcess UnhandledExceptionFilter UnregisterWaitEx WaitForSingleObject WideCharToMultiByte lstrcmpiW ntdll!RtlAllocateHeap ntdll!RtlDeleteCriticalSection ntdll!RtlEnterCriticalSection ntdll!RtlInitializeCriticalSection ntdll!RtlLeaveCriticalSection ntdll!RtlSizeHeap - ADVAPI32.dll:
RegCloseKey RegCreateKeyExW RegDeleteValueW RegEnumKeyExW RegLoadMUIStringW RegNotifyChangeKeyValue RegOpenKeyExW RegQueryInfoKeyW RegQueryValueExW RegSetValueExW - ole32.dll:
combase!CLSIDFromString combase!CoDisconnectObject combase!CoInitializeEx combase!CoTaskMemAlloc combase!CoTaskMemFree combase!CoTaskMemRealloc combase!CoUninitialize combase!StringFromGUID2 - OLEAUT32.dll:
VarUI4FromStr - USER32.dll:
CharNextW UnregisterClassA - WS2_32.dll:
GetNameInfoW - RPCRT4.dll:
CStdStubBuffer_AddRef CStdStubBuffer_Connect CStdStubBuffer_CountRefs CStdStubBuffer_DebugServerQueryInterface CStdStubBuffer_DebugServerRelease CStdStubBuffer_Disconnect CStdStubBuffer_Invoke CStdStubBuffer_IsIIDSupported CStdStubBuffer_QueryInterface IUnknown_AddRef_Proxy IUnknown_QueryInterface_Proxy IUnknown_Release_Proxy NdrCStdStubBuffer_Release NdrDllCanUnloadNow NdrDllGetClassObject NdrDllRegisterProxy NdrDllUnregisterProxy NdrOleAllocate NdrOleFree