efsui.exe

  • File Path: C:\WINDOWS\system32\efsui.exe
  • Description: EFS UI Application

Hashes

Type Hash
MD5 524B03D3B67D982C207D7DE93661DD66
SHA1 1280D17689C095C50DBA3D83ECF71496D174A4E4
SHA256 67152577ED8081F59B80D86A455FF5F08D9E82D531771A5FD74206961E3554A6
SHA384 490CB6171BDCCE54A7550EE1BA369E66133871CF9170D2E718BBCD181F8651E64B27F83E2BCB8760C25EB9C61AD84BDE
SHA512 ACCC814E4C74CFE38EDDCFA5FBF25068C056028E437192F4D4021D59344F455203AE384AC663EEB4284CD804C7D13567BFB927941C653A826323C30222DD7AA5
SSDEEP 384:G0alMh3LtRIhy/3zA6KuFE/OZSTBWSMRW:G0aMTiy/306ny/OZST6
IMP 79780253655B3282FD06EA62FCA2F32F
PESHA1 15C9FCD06E145146F7CFBBD3E14FD3103F929A44
PE256 AF4902944A630FF48297D69393A2EF76DC2287AFA64B3FF088D61679238802C8

Runtime Data

Loaded Modules:

Path
C:\WINDOWS\System32\ADVAPI32.dll
C:\WINDOWS\System32\CRYPT32.dll
C:\WINDOWS\system32\efsui.exe
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\sechost.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: efsui.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.1 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/74
  • VirusTotal Link: https://www.virustotal.com/gui/file/67152577ed8081f59b80d86a455ff5f08d9e82d531771a5fd74206961e3554a6/detection

MIT License. Copyright (c) 2020-2021 Strontic.