Windows 10 DLL File Information - efssvc.dll |
The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 10, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.
General Information
File Description: | EFS Service |
File Version: | 10.0.10130.0 (fbl_impressive.150522-2224) |
Company: | Microsoft Corporation |
Product Name: | Microsoft® Windows® Operating System |
DLL popularity | Very Low - There is no any other DLL in system32 directory that is statically linked to this file. |
File Size: | 38 KB |
Total Number of Exported Functions: | 1 |
Total Number of Exported Functions With Names: | 1 |
Section Headers
Name | Virtual Address | Raw Data Size | % of File | Characteristics | Section Contains... |
---|---|---|---|---|---|
.text | 0x00001000 | 28,672 Bytes | 73.7% | Read, Execute | Code |
.data | 0x00008000 | 512 Bytes | 1.3% | Write, Read | Initialized Data |
.idata | 0x00009000 | 5,120 Bytes | 13.2% | Read | Initialized Data |
.rsrc | 0x0000b000 | 1,536 Bytes | 3.9% | Read | Initialized Data |
.reloc | 0x0000c000 | 2,048 Bytes | 5.3% | Read, Discardable | Initialized Data |
Static Linking
efssvc.dll is statically linked to the following files:msvcrt.dll
api-ms-win-service-core-l1-1-1.dll
api-ms-win-core-errorhandling-l1-1-1.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-service-management-l1-1-0.dll
api-ms-win-service-management-l2-1-0.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-registry-l1-1-0.dll
api-ms-win-security-sddl-l1-1-0.dll
api-ms-win-core-heap-l2-1-0.dll
RPCRT4.dll
api-ms-win-core-heap-l1-2-0.dll
api-ms-win-security-base-l1-2-0.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-processthreads-l1-1-2.dll
api-ms-win-core-sysinfo-l1-2-1.dll
api-ms-win-core-file-l1-2-1.dll
EFSCORE.dll
ntdll.dll
FeClient.dll
This means that when efssvc.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, efssvc.dll won't be loaded.
General Resources Information
Resource Type | Number of Items | Total Size | % of File |
---|---|---|---|
Icons | 0 | 0 Bytes | 0.0% |
Animated Icons | 0 | 0 Bytes | 0.0% |
Cursors | 0 | 0 Bytes | 0.0% |
Animated Cursors | 0 | 0 Bytes | 0.0% |
Bitmaps | 0 | 0 Bytes | 0.0% |
AVI Files | 0 | 0 Bytes | 0.0% |
Dialog-Boxes | 0 | 0 Bytes | 0.0% |
HTML Related Files | 0 | 0 Bytes | 0.0% |
Menus | 0 | 0 Bytes | 0.0% |
Strings | 2 | 484 Bytes | 1.2% |
Type Libraries | 0 | 0 Bytes | 0.0% |
Manifest | 0 | 0 Bytes | 0.0% |
All Others | 2 | 1,096 Bytes | 2.8% |
Total | 4 | 1,580 Bytes | 4.1% |
Icons in this file
No icons found in this file
Cursors in this file
No cursors found in this file
Dialog-boxes list (up to 1000 dialogs)
No dialog resources in this file.
String resources in this dll (up to 1000 strings)
String ID | String Text |
---|---|
100 | Encrypting File System (EFS) |
101 | Provides the core file encryption technology used to store encrypted files on NTFS file system volumes. If this service is stopped or disabled, applications will be unable to access encrypted files. |
COM Classes/Interfaces
There is no type library in this file with COM classes/interfaces information
Exported Functions List
The following functions are exported by this dll:EfsServiceMain |
Imported Functions List
The following functions are imported by this dll:- msvcrt.dll:
_XcptFilter _amsg_exit _callnewh _except_handler4_common _initterm _wcsicmp free malloc memcpy memset - api-ms-win-service-core-l1-1-1.dll:
sechost!RegisterServiceCtrlHandlerExW sechost!SetServiceStatus - api-ms-win-core-errorhandling-l1-1-1.dll:
KernelBase!GetLastError KernelBase!SetUnhandledExceptionFilter KernelBase!UnhandledExceptionFilter - api-ms-win-core-synch-l1-2-0.dll:
KernelBase!CreateEventW KernelBase!SetEvent KernelBase!Sleep - api-ms-win-service-management-l1-1-0.dll:
sechost!CloseServiceHandle sechost!OpenSCManagerW sechost!OpenServiceW - api-ms-win-service-management-l2-1-0.dll:
sechost!ChangeServiceConfigW - api-ms-win-core-handle-l1-1-0.dll:
KernelBase!CloseHandle - api-ms-win-core-registry-l1-1-0.dll:
KernelBase!RegGetValueW KernelBase!RegOpenKeyExW KernelBase!RegQueryInfoKeyW - api-ms-win-security-sddl-l1-1-0.dll:
sechost!ConvertStringSecurityDescriptorToSecurityDescriptorW - api-ms-win-core-heap-l2-1-0.dll:
KernelBase!LocalFree - RPCRT4.dll:
I_RpcBindingIsClientLocal NdrServerCall2 RpcBindingToStringBindingW RpcImpersonateClient RpcRaiseException RpcRevertToSelf RpcServerInqCallAttributesW RpcServerInterfaceGroupActivate RpcServerInterfaceGroupClose RpcServerInterfaceGroupCreateW RpcServerInterfaceGroupDeactivate RpcServerRegisterAuthInfoW RpcStringBindingParseW RpcStringFreeW - api-ms-win-core-heap-l1-2-0.dll:
KernelBase!GetProcessHeap ntdll!RtlAllocateHeap ntdll!RtlFreeHeap - api-ms-win-security-base-l1-2-0.dll:
KernelBase!CheckTokenMembership KernelBase!CreateWellKnownSid KernelBase!IsWellKnownSid - api-ms-win-core-profile-l1-1-0.dll:
ntdll!RtlQueryPerformanceCounter - api-ms-win-core-processthreads-l1-1-2.dll:
kernel32!GetCurrentProcess kernel32!GetCurrentProcessId kernel32!GetCurrentThreadId kernel32!TerminateProcess - api-ms-win-core-sysinfo-l1-2-1.dll:
KernelBase!GetSystemTimeAsFileTime KernelBase!GetTickCount - api-ms-win-core-file-l1-2-1.dll:
KernelBase!CreateFileW KernelBase!GetFileAttributesW - EFSCORE.dll:
EdpDllCredentialCreate EdpDllCredentialDelete EdpDllCredentialExists EdpDllCredentialQuery EdpDllDplUpgradePinInfo EdpDllDplUpgradeVerifyUser EdpDllDplUserCredentialsSet EdpDllDplUserUnlockComplete EdpDllDplUserUnlockStart EdpDllGetCredServiceState EdpDllGetLockSessionUnwrappedKey EdpDllGetLockSessionWrappedKey EdpDllQueryDplEnforcedPolicyOwnerIds EdpDllQueryRevokedPolicyOwnerIds EdpDllQueueFileForEncryption EdpDllServiceFileEncryptionQueue EfsDllAddUsersToFileSrv EfsDllCloseFileRaw EfsDllConstructEFS EfsDllDecryptFek EfsDllDecryptFileSrv EfsDllDisabled EfsDllDuplicateEncryptionInfoFileSrv EfsDllEncryptFileSrv EfsDllErrorToNtStatus EfsDllFileKeyInfoSrv EfsDllFreeHeap EfsDllFreeUserInfo EfsDllGetLocalFileName EfsDllGetLogFile EfsDllGetUserInfo EfsDllGetVolumeRoot EfsDllIsNonEfsSKU EfsDllLoadUserProfile EfsDllMarkFileForDelete EfsDllOnSessionChange EfsDllOpenFileRaw EfsDllQueryProtectorsSrv EfsDllQueryRecoveryAgentsSrv EfsDllQueryUsersOnFileSrv EfsDllReadFileRaw EfsDllRemoveUsersFromFileSrv EfsDllSetFileEncryptionKeySrv EfsDllShareDecline EfsDllSsoFlushUserCache EfsDllUnloadUserProfile EfsDllUsePinForEncryptedFilesSrv EfsDllValidateEfsStream EfsDllWriteEncryptedFileWithHeader EfsDllWriteFileRaw EfsInitialize EfsUnInitialize - ntdll.dll:
EtwEventEnabled EtwEventRegister EtwEventUnregister EtwEventWrite NtClearEvent NtClose NtCreateEvent NtOpenEvent NtOpenThreadToken NtQueryInformationToken NtSetEvent RtlAllocateHeap RtlFreeHeap RtlInitUnicodeString RtlNtStatusToDosError RtlValidRelativeSecurityDescriptor RtlValidSid - FeClient.dll:
EfsClientFileEncryptionStatus