efsext.dll
- File Path:
C:\Windows\system32\efsext.dll
- Description: EFSEXT.DLL
Hashes
| Type |
Hash |
| MD5 |
62E47DD4FA34C8C709BEAB09688C9A01 |
| SHA1 |
37BF5888B8ACF6F8ECE14A8A7548024EE3E43500 |
| SHA256 |
3C572652582F0CF58EB42A42D491F83864FE3D6431ABAE04504265EB52F32146 |
| SHA384 |
3B2F0E1CF4DB8C00C56F0AC740E94284D692169B5EDF1976826FEB2FA73B649DDEE58E20D7F194803E9036131080F1BA |
| SHA512 |
82F946EFBE73D621B1451B8CDE33E6C632EBC81089B65AEB14885B6F1103B77CFE703A8E2A76EC2241B47B5DB477422E71C3305F3BB177DD0AF6F4027AABA14E |
| SSDEEP |
1536:LkW6AAfmA/AJeEurbsPG7WYyFMWHOGor4zaHAJYmJSNtb+Rtxacif01Lk6a:I2KlrH+zFMW3owf1SNuFif01L9a |
| IMP |
7123419EBDBC49745927F5072116B3B5 |
| PESHA1 |
A75B4E4F66CACEF10BAFE8F5C3B69D0083EF68AE |
| PE256 |
28ED80AAF6D58C21E6A5C1F10F5311C29C7A2461FAB3EBB415C06AD9D44285CB |
DLL Exports:
| Function Name |
Ordinal |
Type |
EfsPlatform_SuspendNotificationsAndEncryptFile |
9 |
Exported Function |
EfsPlatform_LaunchPromptUI |
8 |
Exported Function |
EfsPlatform_IsCallerAutomaticallyDelegated |
7 |
Exported Function |
FVE_LaunchSDCardUI |
12 |
Exported Function |
FVE_LaunchConsentPromptUI |
11 |
Exported Function |
EfsPlatform_UnpackSecurePin |
10 |
Exported Function |
EdpPlatform_ShowDialog |
3 |
Exported Function |
EdpPlatform_RegisterUserSessionNotification |
2 |
Exported Function |
EdpPlatform_QueryUserSessionState |
1 |
Exported Function |
EfsPlatform_GetCallerID |
6 |
Exported Function |
EdpPlatform_UnregisterUserSessionNotification |
5 |
Exported Function |
EdpPlatform_ShowUI |
4 |
Exported Function |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: EFSEXT.DLL.MUI
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/72
- VirusTotal Link: https://www.virustotal.com/gui/file/3c572652582f0cf58eb42a42d491f83864fe3d6431abae04504265eb52f32146/detection/
MIT License. Copyright (c) 2020-2021 Strontic.