| Windows 8 DLL File Information - sechost.dll |
The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 8, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.
General Information
| File Description: | Host for SCM/SDDL/LSA Lookup APIs |
| File Version: | 6.2.9200.16384 (win8_rtm.120725-1247) |
| Company: | Microsoft Corporation |
| Product Name: | Microsoft® Windows® Operating System |
| DLL popularity | Very Low - There is no any other DLL in system32 directory that is statically linked to this file. |
| File Size: | 194 KB |
| Total Number of Exported Functions: | 147 |
| Total Number of Exported Functions With Names: | 147 |
Section Headers
| Name | Virtual Address | Raw Data Size | % of File | Characteristics | Section Contains... |
|---|---|---|---|---|---|
| .text | 0x00001000 | 172,544 Bytes | 86.6% | Read, Execute | Code |
| .data | 0x0002c000 | 8,704 Bytes | 4.4% | Write, Read | Initialized Data |
| .idata | 0x0002f000 | 7,680 Bytes | 3.9% | Read | Initialized Data |
| .rsrc | 0x00031000 | 1,536 Bytes | 0.8% | Read | Initialized Data |
| .reloc | 0x00032000 | 7,680 Bytes | 3.9% | Read, Discardable | Initialized Data |
Static Linking
sechost.dll is statically linked to the following files:ntdll.dll
api-ms-win-core-libraryloader-l1-1-1.dll
RPCRT4.dll
api-ms-win-core-crt-l1-1-0.dll
api-ms-win-core-threadpool-l1-2-0.dll
api-ms-win-core-debug-l1-1-1.dll
api-ms-win-core-errorhandling-l1-1-1.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-interlocked-l1-2-0.dll
api-ms-win-core-heap-l1-2-0.dll
api-ms-win-core-registry-l1-1-0.dll
api-ms-win-core-heap-obsolete-l1-1-0.dll
api-ms-win-core-string-obsolete-l1-1-0.dll
api-ms-win-core-processthreads-l1-1-1.dll
api-ms-win-core-string-l1-1-0.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-sysinfo-l1-2-0.dll
api-ms-win-core-wow64-l1-1-0.dll
api-ms-win-security-base-l1-2-0.dll
api-ms-win-core-delayload-l1-1-1.dll
This means that when sechost.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, sechost.dll won't be loaded.
General Resources Information
| Resource Type | Number of Items | Total Size | % of File |
|---|---|---|---|
| Icons | 0 | 0 Bytes | 0.0% |
| Animated Icons | 0 | 0 Bytes | 0.0% |
| Cursors | 0 | 0 Bytes | 0.0% |
| Animated Cursors | 0 | 0 Bytes | 0.0% |
| Bitmaps | 0 | 0 Bytes | 0.0% |
| AVI Files | 0 | 0 Bytes | 0.0% |
| Dialog-Boxes | 0 | 0 Bytes | 0.0% |
| HTML Related Files | 0 | 0 Bytes | 0.0% |
| Menus | 0 | 0 Bytes | 0.0% |
| Strings | 0 | 0 Bytes | 0.0% |
| Type Libraries | 0 | 0 Bytes | 0.0% |
| Manifest | 0 | 0 Bytes | 0.0% |
| All Others | 2 | 1,136 Bytes | 0.6% |
| Total | 2 | 1,136 Bytes | 0.6% |
Icons in this file
No icons found in this file
Cursors in this file
No cursors found in this file
Dialog-boxes list (up to 200 dialogs)
No dialog resources in this file.
String resources in this dll (up to 200 strings)
No string resources in this file.
COM Classes/Interfaces
There is no type library in this file with COM classes/interfaces information
Exported Functions List
The following functions are exported by this dll:| AuditComputeEffectivePolicyBySid | AuditFree |
| AuditQuerySystemPolicy | AuditSetSystemPolicy |
| ChangeServiceConfig2A | ChangeServiceConfig2W |
| ChangeServiceConfigA | ChangeServiceConfigW |
| CloseServiceHandle | ControlService |
| ControlServiceExA | ControlServiceExW |
| ConvertSecurityDescriptorToStringSecurityDescriptorW | ConvertSidToStringSidW |
| ConvertStringSecurityDescriptorToSecurityDescriptorW | ConvertStringSidToSidW |
| CreateServiceA | CreateServiceW |
| CredBackupCredentials | CredDeleteA |
| CredDeleteW | CredEncryptAndMarshalBinaryBlob |
| CredEnumerateA | CredEnumerateW |
| CredFindBestCredentialA | CredFindBestCredentialW |
| CredFree | CredGetSessionTypes |
| CredGetTargetInfoA | CredGetTargetInfoW |
| CredIsMarshaledCredentialW | CredIsProtectedA |
| CredIsProtectedW | CredMarshalCredentialA |
| CredMarshalCredentialW | CredParseUserNameWithType |
| CredProfileLoaded | CredProfileLoadedEx |
| CredProfileUnloaded | CredProtectA |
| CredProtectW | CredReadA |
| CredReadByTokenHandle | CredReadDomainCredentialsA |
| CredReadDomainCredentialsW | CredReadW |
| CredRestoreCredentials | CredUnmarshalCredentialA |
| CredUnmarshalCredentialW | CredUnprotectA |
| CredUnprotectW | CredWriteA |
| CredWriteDomainCredentialsA | CredWriteDomainCredentialsW |
| CredWriteW | CredpConvertCredential |
| CredpConvertOneCredentialSize | CredpConvertTargetInfo |
| CredpDecodeCredential | CredpEncodeCredential |
| CredpEncodeSecret | DeleteService |
| EnumDependentServicesW | EnumServicesStatusExW |
| EnumerateIdentityProviders | GetDefaultIdentityProvider |
| GetIdentityProviderInfoByGUID | GetIdentityProviderInfoByName |
| I_QueryTagInformation | I_ScBroadcastServiceControlMessage |
| I_ScIsSecurityProcess | I_ScPnPGetServiceName |
| I_ScQueryServiceConfig | I_ScRegisterDeviceNotification |
| I_ScRpcBindA | I_ScRpcBindW |
| I_ScSendPnPMessage | I_ScSendTSMessage |
| I_ScSetServiceBitsA | I_ScSetServiceBitsW |
| I_ScUnregisterDeviceNotification | I_ScValidatePnPService |
| LocalGetConditionForString | LocalGetReferencedTokenTypesForCondition |
| LocalGetStringForCondition | LookupAccountNameLocalA |
| LookupAccountNameLocalW | LookupAccountSidLocalA |
| LookupAccountSidLocalW | LsaAddAccountRights |
| LsaClose | LsaCreateSecret |
| LsaEnumerateAccountRights | LsaEnumerateAccountsWithUserRight |
| LsaFreeMemory | LsaICLookupNames |
| LsaICLookupNamesWithCreds | LsaICLookupSids |
| LsaICLookupSidsWithCreds | LsaLookupClose |
| LsaLookupFreeMemory | LsaLookupGetDomainInfo |
| LsaLookupManageSidNameMapping | LsaLookupNames2 |
| LsaLookupOpenLocalPolicy | LsaLookupSids |
| LsaLookupSids2 | LsaLookupTranslateNames |
| LsaLookupTranslateSids | LsaOpenPolicy |
| LsaOpenSecret | LsaQueryInformationPolicy |
| LsaQuerySecret | LsaRemoveAccountRights |
| LsaRetrievePrivateData | LsaSetInformationPolicy |
| LsaSetSecret | LsaStorePrivateData |
| NotifyServiceStatusChange | NotifyServiceStatusChangeA |
| NotifyServiceStatusChangeW | OpenSCManagerA |
| OpenSCManagerW | OpenServiceA |
| OpenServiceW | QueryServiceConfig2A |
| QueryServiceConfig2W | QueryServiceConfigA |
| QueryServiceConfigW | QueryServiceDynamicInformation |
| QueryServiceObjectSecurity | QueryServiceStatus |
| QueryServiceStatusEx | RegisterServiceCtrlHandlerA |
| RegisterServiceCtrlHandlerExA | RegisterServiceCtrlHandlerExW |
| RegisterServiceCtrlHandlerW | ReleaseIdentityProviderEnumContext |
| SetServiceObjectSecurity | SetServiceStatus |
| StartServiceA | StartServiceCtrlDispatcherA |
| StartServiceCtrlDispatcherW | StartServiceW |
| SubscribeServiceChangeNotifications | UnsubscribeServiceChangeNotifications |
| WaitServiceState |
Imported Functions List
The following functions are imported by this dll:- ntdll.dll:
DbgPrintEx LdrQueryModuleServiceTags NlsMbCodePageTag NtClose NtOpenProcessToken NtOpenThreadToken NtQueryInformationProcess NtQueryInformationThread NtQueryInformationToken NtQueueApcThread NtSetInformationThread NtTerminateProcess RtlAbsoluteToSelfRelativeSD RtlAcquireSRWLockExclusive RtlAcquireSRWLockShared RtlAddAccessAllowedAceEx RtlAddAccessAllowedObjectAce RtlAddAccessDeniedAceEx RtlAddAccessDeniedObjectAce RtlAddAce RtlAddAuditAccessAceEx RtlAddAuditAccessObjectAce RtlAllocateHeap RtlAnsiStringToUnicodeSize RtlAnsiStringToUnicodeString RtlCompareMemory RtlCompareUnicodeString RtlConvertSidToUnicodeString RtlCopySid RtlCopyUnicodeString RtlCreateAcl RtlCreateSecurityDescriptor RtlCreateServiceSid RtlDeleteCriticalSection RtlDllShutdownInProgress RtlEqualPrefixSid RtlEqualSid RtlEqualUnicodeString RtlFirstFreeAce RtlFreeAnsiString RtlFreeHeap RtlGUIDFromString RtlGetAce RtlGetControlSecurityDescriptor RtlGetDaclSecurityDescriptor RtlGetGroupSecurityDescriptor RtlGetNtProductType RtlGetOwnerSecurityDescriptor RtlGetSaclSecurityDescriptor RtlInitAnsiString RtlInitUnicodeString RtlInitUnicodeStringEx RtlInitializeConditionVariable RtlInitializeCriticalSectionEx RtlInitializeSid RtlLengthSid RtlMakeSelfRelativeSD RtlNtStatusToDosError RtlNtStatusToDosErrorNoTeb RtlQueryWnfStateData RtlReleaseSRWLockExclusive RtlReleaseSRWLockShared RtlRunOnceExecuteOnce RtlSetDaclSecurityDescriptor RtlSetGroupSecurityDescriptor RtlSetOwnerSecurityDescriptor RtlSetSaclSecurityDescriptor RtlSubAuthorityCountSid RtlSubAuthoritySid RtlSubscribeWnfStateChangeNotification RtlUnhandledExceptionFilter RtlUnicodeStringToAnsiSize RtlUnicodeStringToAnsiString RtlUnicodeToMultiByteSize RtlUnsubscribeWnfNotificationWaitForCompletion RtlUnsubscribeWnfStateChangeNotification RtlValidAcl RtlValidSid WinSqmAddToStream - api-ms-win-core-libraryloader-l1-1-1.dll:
KernelBase!DisableThreadLibraryCalls KernelBase!FreeLibrary KernelBase!GetModuleHandleExW KernelBase!GetProcAddress KernelBase!LoadLibraryExW - RPCRT4.dll:
I_RpcExceptionFilter I_RpcMapWin32Status NdrAsyncClientCall NdrClientCall2 RpcAsyncCancelCall RpcAsyncCompleteCall RpcAsyncInitializeHandle RpcBindingBind RpcBindingCreateW RpcBindingFree RpcBindingFromStringBindingW RpcBindingServerFromClient RpcBindingSetAuthInfoExW RpcBindingSetAuthInfoW RpcBindingSetOption RpcBindingToStringBindingW RpcImpersonateClient RpcRevertToSelf RpcServerInqCallAttributesA RpcSmDestroyClientContext RpcSsDestroyClientContext RpcSsGetContextBinding RpcStringBindingComposeW RpcStringBindingParseW RpcStringFreeW UuidCreate UuidEqual UuidFromStringW UuidIsNil UuidToStringW - api-ms-win-core-crt-l1-1-0.dll:
ntdll!_errno ntdll!_except_handler4_common ntdll!_i64tow_s ntdll!_ui64tow_s ntdll!_ultow ntdll!_ultow_s ntdll!_vsnwprintf_s ntdll!_wcsicmp ntdll!_wcslwr_s ntdll!_wcsnicmp ntdll!_wcstoi64 ntdll!_wcstoui64 ntdll!iswctype ntdll!memcmp ntdll!memcpy ntdll!memset ntdll!qsort_s ntdll!swprintf_s ntdll!wcschr ntdll!wcscpy_s ntdll!wcsncmp ntdll!wcsncpy_s ntdll!wcsrchr ntdll!wcsstr ntdll!wcstok_s ntdll!wcstoul - api-ms-win-core-threadpool-l1-2-0.dll:
KernelBase!CreateThreadpoolWork ntdll!TpPostWork ntdll!TpReleaseWork - api-ms-win-core-debug-l1-1-1.dll:
KernelBase!DebugBreak KernelBase!IsDebuggerPresent - api-ms-win-core-errorhandling-l1-1-1.dll:
KernelBase!GetLastError ntdll!RtlRestoreLastWin32Error - api-ms-win-core-handle-l1-1-0.dll:
KernelBase!CloseHandle - api-ms-win-core-interlocked-l1-2-0.dll:
KernelBase!InterlockedCompareExchange KernelBase!InterlockedDecrement KernelBase!InterlockedExchange KernelBase!InterlockedIncrement - api-ms-win-core-heap-l1-2-0.dll:
KernelBase!GetProcessHeap ntdll!RtlAllocateHeap ntdll!RtlFreeHeap - api-ms-win-core-registry-l1-1-0.dll:
KernelBase!RegCloseKey KernelBase!RegEnumKeyExW KernelBase!RegNotifyChangeKeyValue KernelBase!RegOpenKeyExA KernelBase!RegOpenKeyExW KernelBase!RegQueryValueExA KernelBase!RegQueryValueExW - api-ms-win-core-heap-obsolete-l1-1-0.dll:
kernel32!LocalAlloc kernel32!LocalFree kernel32!LocalReAlloc - api-ms-win-core-string-obsolete-l1-1-0.dll:
kernel32!lstrcmpiW - api-ms-win-core-processthreads-l1-1-1.dll:
KernelBase!OpenProcessToken kernel32!CreateThread kernel32!GetCurrentProcess kernel32!GetCurrentProcessId kernel32!GetCurrentThreadId kernel32!GetProcessTimes kernel32!GetThreadPriority kernel32!OpenThread kernel32!ResumeThread kernel32!SetThreadPriority kernel32!TerminateThread kernel32!TlsAlloc kernel32!TlsGetValue kernel32!TlsSetValue - api-ms-win-core-string-l1-1-0.dll:
KernelBase!CompareStringW - api-ms-win-core-synch-l1-2-0.dll:
KernelBase!CreateEventA KernelBase!CreateEventW KernelBase!OpenEventW KernelBase!ResetEvent KernelBase!SetEvent KernelBase!Sleep KernelBase!SleepEx KernelBase!WaitForMultipleObjectsEx KernelBase!WaitForSingleObject KernelBase!WaitForSingleObjectEx ntdll!RtlAcquireSRWLockExclusive ntdll!RtlAcquireSRWLockShared ntdll!RtlEnterCriticalSection ntdll!RtlInitializeConditionVariable ntdll!RtlLeaveCriticalSection ntdll!RtlReleaseSRWLockExclusive ntdll!RtlReleaseSRWLockShared - api-ms-win-core-sysinfo-l1-2-0.dll:
KernelBase!GetComputerNameExW - api-ms-win-core-wow64-l1-1-0.dll:
KernelBase!IsWow64Process - api-ms-win-security-base-l1-2-0.dll:
KernelBase!AdjustTokenGroups KernelBase!AllocateAndInitializeSid KernelBase!EqualDomainSid KernelBase!EqualSid KernelBase!FreeSid KernelBase!GetSidSubAuthority KernelBase!GetSidSubAuthorityCount KernelBase!GetTokenInformation KernelBase!IsValidSecurityDescriptor - api-ms-win-core-delayload-l1-1-1.dll:
kernel32!DelayLoadFailureHook ntdll!LdrResolveDelayLoadedAPI