efsutil.dll

  • File Path: C:\Windows\SysWOW64\efsutil.dll
  • Description: EFS Utility Library

Hashes

Type Hash
MD5 9AF7844636B18E9D754E724D9D30E4E7
SHA1 B9123BCF10F85F144D3042C53D1D7E286AB30853
SHA256 D64E237A51408D12D8AF1B3A74AA6F1F8EB3A053847934AE316D9F08E7F9DB87
SHA384 5136E4DBB03E8D5D1B3E69399E2A8BDCB7CFADF6C05EAC6B5DA6CCC7247B25F0FD741EA30AA19D805581236B5F187102
SHA512 7E7CD0A458F0300080F21D4177F4E6B7F8BCD78CE77634A0A9818A8D06E4279579624C12193BB895C030806FC2357151DC5B126B3B3ED70B2ACD38B4A31C23B0
SSDEEP 768:KlHqyhOk7G6u5RuQXtX+LV7GJuV/n/Vhmp5GoZHUg:W9Jhu5Xgaup/VY5GoZ0
IMP 629809E695F3ACF19D11CD911AFC6319
PESHA1 220BA9404205D3708D56C700F3F82C77A98FC120
PE256 56913599FEC54719772B572B83345C42322126272C57846BEACB27E37DFB389F

DLL Exports:

Function Name Ordinal Type
EfsUtilIsSmartcardKey 15 Exported Function
EfsUtilIsSmartcardProvider 16 Exported Function
EfsUtilGetUserKey 14 Exported Function
EfsUtilGetPublicKeyType 12 Exported Function
EfsUtilGetSmartcardProviderName 13 Exported Function
EfsUtilParseDataRecoveryPolicy_1_1 17 Exported Function
EfsUtilSetSmartcardPin 21 Exported Function
EfsUtilSmartcardCredsNeededError 22 Exported Function
EfsUtilSetCurrentKey 20 Exported Function
EfsUtilReleaseProvider 18 Exported Function
EfsUtilReleaseUserKey 19 Exported Function
EfsUtilFreeParsedRecoveryPolicy 4 Exported Function
EfsUtilGetCertContextFromCertHash 5 Exported Function
EfsUtilCreateSelfSignedCertificate 3 Exported Function
EfsUtilApplyGroupPolicy 1 Exported Function
EfsUtilCheckCurrentKeyCapabilities 2 Exported Function
EfsUtilGetCertDisplayInformation 6 Exported Function
EfsUtilGetCurrentUserInformation 10 Exported Function
EfsUtilGetProvider 11 Exported Function
EfsUtilGetCurrentKey_Deprecated 9 Exported Function
EfsUtilGetCertNameFromCertContext 7 Exported Function
EfsUtilGetCurrentKey 8 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: EFSUTIL.DLL
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/d64e237a51408d12d8af1b3a74aa6f1f8eb3a053847934ae316d9f08e7f9db87/detection/

MIT License. Copyright (c) 2020-2021 Strontic.