efswrt.dll

  • File Path: C:\Windows\SysWOW64\efswrt.dll
  • Description: Storage Protection Windows Runtime DLL

Hashes

Type Hash
MD5 BD952CF3DAECBC2379A7C886DDDB73B4
SHA1 7B8E1339CBE0A8CD557E2724240EA4A7E56933AF
SHA256 59D07B546F445716B1C7693A397E19F1985AFFBCDC62AF54BEA155F77182B22C
SHA384 9F558512C3F8016A39466979D6E443EA1D7CF23EBB971A837374F61A211A90E901F14C150EF3B58F58DB3DB53712CD4A
SHA512 A5C5F32C3869AFB36E523E7E67D4E1822457AAA6DBBAC60FAC10843AA8D592772BD071FF232F3C65703F2EB87CEB582FB457175A36152242FE379DCFA8C9C86C
SSDEEP 12288:nYpdyhyQMLAhu0Bp0iR5XG7RDtTY+QimRSzkMNuW7wp:nJhyZLAhu0BpVzXcXTJQz0zkc
IMP 89B0D925F63A3F063373EE0E9FFF62A8
PESHA1 B8D4BBE87614FA4D30056A96380C76C24413CA97
PE256 3FE2B5DC2CAD8A007289B46C39E9317A5DECB55E0F83FB6BA36F166F6E231171

DLL Exports:

Function Name Ordinal Type
EnterpriseDataGetStatus 21 Exported Function
EnterpriseDataProtect 22 Exported Function
EnterpriseDataRevoke 23 Exported Function
EnterpriseDataCopyProtection 20 Exported Function
DpmStreamOpenToUnprotect 17 Exported Function
DpmStreamUpdate 18 Exported Function
DpmUnprotectSecret 19 Exported Function
FreeIdentityProtectorList 24 Exported Function
ProtectOrReprotectFileToIdentity 29 Exported Function
QueryIdentityProtectors 30 Exported Function
UnprotectFile 31 Exported Function
ProtectFileToIdentity 28 Exported Function
GetEnterpriseActionForCopy 25 Exported Function
GetEnterpriseIdForNetworkPath 26 Exported Function
ProtectFileToEnterpriseIdentity 27 Exported Function
DpmStreamOpenToProtectToIdentity 16 Exported Function
CdplProtectFileToLevel 5 Exported Function
CdplProtectFileToLevelWithResult 6 Exported Function
CdplProtectKnownUserFolders 7 Exported Function
CdplIsSupported 4 Exported Function
CdplGetFileProtectionLevel 1 Exported Function
CdplIsAppAllowedToRun 2 Exported Function
CdplIsAppDataProtectionSupported 3 Exported Function
CdplProtectSecretToLevel 8 Exported Function
DpmBufferFree 13 Exported Function
DpmProtectSecretToIdentity 14 Exported Function
DpmStreamClose 15 Exported Function
DllGetClassObject 12 Exported Function
CdplUnprotectSecret 9 Exported Function
DllCanUnloadNow 10 Exported Function
DllGetActivationFactory 11 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: efswrt.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.488 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.488
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/67
  • VirusTotal Link: https://www.virustotal.com/gui/file/59d07b546f445716b1c7693a397e19f1985affbcdc62af54bea155f77182b22c/detection/

MIT License. Copyright (c) 2020-2021 Strontic.