efsutil.dll

  • File Path: C:\Windows\system32\efsutil.dll
  • Description: EFS Utility Library

Hashes

Type Hash
MD5 48541D7510FF0F6C1070FDA3FA1D4393
SHA1 8DC3658B56564311CAB6314D751545E695545792
SHA256 897A2CDCEF5CE938DFB2CEE403768DB0D8B0E465B88947B1CE53E6CC8F28DAC7
SHA384 3E60CD7EF2A8AD24ACA7F44765EC5C450A11C59A40B3FB26E0CDD3ED1F8A0229E9E5CC2D516FDE09882FE0797FB10350
SHA512 7A48519E13387E0AB02BC8B5D3E8E087066E4971970C0B2A8CA7EC58E315EBF15C9A1A4B55E27235432227D6245767B248B90C88E839616952ECE4A7781677EE
SSDEEP 768:E4q5cWRj/4egOtABYCbnevl3p1ythUSWv6gHm3D5oqaD:an5guAjMdyQULD5otD
IMP C71C8C53FC728F88B5D0B8CCF7227A1A
PESHA1 754B0338AD01FCD65291F6C7444830E88DC839F7
PE256 A7AB7B6E028776B1B503C5C11FA4886323B53910BCBCA4EE8C834BA70A08F9BE

DLL Exports:

Function Name Ordinal Type
EfsUtilIsSmartcardKey 15 Exported Function
EfsUtilIsSmartcardProvider 16 Exported Function
EfsUtilGetUserKey 14 Exported Function
EfsUtilGetPublicKeyType 12 Exported Function
EfsUtilGetSmartcardProviderName 13 Exported Function
EfsUtilParseDataRecoveryPolicy_1_1 17 Exported Function
EfsUtilSetSmartcardPin 21 Exported Function
EfsUtilSmartcardCredsNeededError 22 Exported Function
EfsUtilSetCurrentKey 20 Exported Function
EfsUtilReleaseProvider 18 Exported Function
EfsUtilReleaseUserKey 19 Exported Function
EfsUtilFreeParsedRecoveryPolicy 4 Exported Function
EfsUtilGetCertContextFromCertHash 5 Exported Function
EfsUtilCreateSelfSignedCertificate 3 Exported Function
EfsUtilApplyGroupPolicy 1 Exported Function
EfsUtilCheckCurrentKeyCapabilities 2 Exported Function
EfsUtilGetCertDisplayInformation 6 Exported Function
EfsUtilGetCurrentUserInformation 10 Exported Function
EfsUtilGetProvider 11 Exported Function
EfsUtilGetCurrentKey_Deprecated 9 Exported Function
EfsUtilGetCertNameFromCertContext 7 Exported Function
EfsUtilGetCurrentKey 8 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: EFSUTIL.DLL
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/897a2cdcef5ce938dfb2cee403768db0d8b0e465b88947b1ce53e6cc8f28dac7/detection/

MIT License. Copyright (c) 2020-2021 Strontic.