¿Para qué sirve la dll efscore.dll?

Biblioteca principal de EFS

Dependencias de la dll efscore.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\efscore.dll

File Type: DLL

  Image has the following dependencies:

    msvcrt.dll
    api-ms-win-core-libraryloader-l1-2-0.dll
    api-ms-win-core-synch-l1-1-0.dll
    api-ms-win-core-heap-l1-1-0.dll
    api-ms-win-core-errorhandling-l1-1-0.dll
    api-ms-win-core-threadpool-l1-2-0.dll
    api-ms-win-core-processthreads-l1-1-0.dll
    api-ms-win-core-localization-l1-2-0.dll
    api-ms-win-core-debug-l1-1-0.dll
    api-ms-win-core-handle-l1-1-0.dll
    api-ms-win-eventing-provider-l1-1-0.dll
    api-ms-win-core-heap-l2-1-0.dll
    api-ms-win-core-sysinfo-l1-1-0.dll
    api-ms-win-core-file-l1-1-0.dll
    api-ms-win-core-synch-l1-2-0.dll
    api-ms-win-core-registry-l1-1-0.dll
    api-ms-win-core-com-l1-1-0.dll
    api-ms-win-core-io-l1-1-0.dll
    api-ms-win-core-memory-l1-1-0.dll
    CRYPT32.dll
    api-ms-win-core-winrt-l1-1-0.dll
    api-ms-win-security-base-l1-1-0.dll
    api-ms-win-core-timezone-l1-1-0.dll
    ncrypt.dll
    AUTHZ.dll
    bcrypt.dll
    api-ms-win-core-rtlsupport-l1-1-0.dll
    USERENV.dll
    netutils.dll
    DSROLE.dll
    SspiCli.dll
    api-ms-win-core-registry-l1-1-1.dll
    api-ms-win-core-file-l2-1-0.dll
    api-ms-win-core-processenvironment-l1-1-0.dll
    api-ms-win-security-sddl-l1-1-0.dll
    api-ms-win-core-synch-l1-2-1.dll
    api-ms-win-core-file-l1-2-0.dll
    api-ms-win-core-string-l1-1-0.dll
    api-ms-win-core-util-l1-1-0.dll
    api-ms-win-core-profile-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-1.dll
    OLEAUT32.dll
    api-ms-win-core-winrt-string-l1-1-0.dll
    WINHTTP.dll
    api-ms-win-core-path-l1-1-0.dll
    api-ms-win-core-kernel32-legacy-l1-1-0.dll
    api-ms-win-core-threadpool-legacy-l1-1-0.dll
    api-ms-win-core-shlwapi-legacy-l1-1-0.dll
    api-ms-win-core-apiquery-l1-1-0.dll
    api-ms-win-appmodel-runtime-l1-1-0.dll
    api-ms-win-stateseparation-helpers-l1-1-0.dll
    profapi.dll
    ntdll.dll
    iertutil.dll
    api-ms-win-service-private-l1-1-0.dll
    api-ms-win-core-memory-l1-1-1.dll
    api-ms-win-core-delayload-l1-1-1.dll
    api-ms-win-core-delayload-l1-1-0.dll

  Image has the following delay load dependencies:

    CRYPTBASE.dll
    RPCRT4.dll
    logoncli.dll
    samcli.dll
    srvcli.dll
    ext-ms-win-edputil-policy-l1-1-0.dll
    ext-ms-win-edputil-policy-l1-1-1.dll
    ext-ms-win-session-wtsapi32-l1-1-0.dll
    ext-ms-win-session-usertoken-l1-1-0.dll
    ext-ms-win-session-usermgr-l1-1-0.dll
    api-ms-win-security-lsalookup-l1-1-0.dll
    api-ms-win-security-lsalookup-l1-1-2.dll
    ext-ms-win-security-efs-l1-1-0.dll
    ext-ms-win-devmgmt-policy-l1-1-0.dll
    ext-ms-win-feclient-encryptedfile-l1-1-2.dll
    ext-ms-win-feclient-encryptedfile-l1-1-0.dll
    ext-ms-win-feclient-encryptedfile-l1-1-1.dll
    ext-ms-win-fveapi-query-l1-1-0.dll
    api-ms-win-core-featurestaging-l1-1-0.dll
    api-ms-win-appmodel-state-l1-2-0.dll
    cryptngc.dll
    CRYPTSP.dll
    EFSUTIL.dll
    edpauditapi.dll
    winmsipc.dll
    winipcfile.dll
    wevtapi.dll
    USER32.dll
    dsreg.dll

  Summary

        4000 .data
        1000 .didat
        6000 .pdata
       32000 .rdata
        2000 .reloc
        5000 .rsrc
       DF000 .text

Funciones que tiene la dll efscore.dll


2    0 00041010 EdpDllAllowFileAccessForProcess
3    1 0000CDB0 EdpDllCredSvcControl
4    2 0000C240 EdpDllCredentialCreate
5    3 0000C520 EdpDllCredentialDelete
6    4 0000C420 EdpDllCredentialExists
7    5 0000C330 EdpDllCredentialQuery
8    6 0000CD40 EdpDllDplUpgradePinInfo
9    7 0000CD60 EdpDllDplUpgradeVerifyUser
10    8 0000CD80 EdpDllDplUserCredentialsSet
11    9 0000CDA0 EdpDllDplUserUnlockComplete
12    A 0000CDA0 EdpDllDplUserUnlockStart
13    B 0000CB80 EdpDllGetCredServiceState
14    C 0000C940 EdpDllGetLockSessionUnwrappedKey
15    D 0000C8D0 EdpDllGetLockSessionWrappedKey
16    E 00041CB0 EdpDllGetTfaCache
17    F 00044940 EdpDllPurgeAppLearningEvents
18   10 0000C7F0 EdpDllQueryDplEnforcedPolicyOwnerIds
19   11 0000C700 EdpDllQueryRevokedPolicyOwnerIds
20   12 0003DE70 EdpDllQueueFileForEncryption
21   13 0000CF00 EdpDllRmsClearKeys
22   14 0000CF20 EdpDllRmsContainerizeFile
23   15 0000D5D0 EdpDllRmsDecontainerizeFile
24   16 0000D2C0 EdpDllRmsGetContainerIdentity
25   17 0003DFE0 EdpDllServiceFileEncryptionQueue
26   18 00044960 EdpWriteAppLearningLog
27   19 00044B30 EdpWriteSiteLearningLog
28   1A 0000AEF0 EfsDllAddUsersToFileSrv
29   1B 0000C100 EfsDllAllocateHeap
30   1C 0000D890 EfsDllCheckFileAccess
31   1D 0000A5F0 EfsDllCloseFileRaw
32   1E 0000B340 EfsDllConstructEFS
33   1F 0000BF20 EfsDllDecryptFek
34   20 0000AC20 EfsDllDecryptFileSrv
35   21 0000A6F0 EfsDllDisabled
1   22 0000DA10 EfsDllDplAppKeyCachingFeatureEnabled
36   23 0000B020 EfsDllDuplicateEncryptionInfoFileSrv
37   24 0000AC10 EfsDllEncryptFileSrv
38   25 0000C0F0 EfsDllErrorToNtStatus
39   26 0000B030 EfsDllFileKeyInfoSrv
40   27 0000C140 EfsDllFreeHeap
41   28 0000AB90 EfsDllFreeUserInfo
42   29 0000C180 EfsDllGetLocalFileName
43   2A 0000A710 EfsDllGetLogFile
44   2B 0000AB80 EfsDllGetUserInfo
45   2C 0000A700 EfsDllGetVolumeRoot
46   2D 0000C620 EfsDllIsConsumerProtectionEnforced
47   2E 0000A6E0 EfsDllIsNonEfsSKU
48   2F 0000ABA0 EfsDllLoadUserProfile
49   30 0000ABC0 EfsDllMarkFileForDelete
50   31 0000D870 EfsDllOefsAcquireExclusiveOperation
51   32 00048930 EfsDllOefsCheckSupportByFilePath
52   33 0000D880 EfsDllOefsReleaseExclusiveOperation
53   34 0000A720 EfsDllOnSessionChange
54   35 0000A940 EfsDllOnSessionUserChange
55   36 0000A5D0 EfsDllOpenFileRaw
56   37 0000AE30 EfsDllQueryProtectorsSrv
57   38 0000AD30 EfsDllQueryRecoveryAgentsSrv
58   39 0000AC30 EfsDllQueryUsersOnFileSrv
59   3A 0000A600 EfsDllReadFileRaw
60   3B 0000AF60 EfsDllRemoveUsersFromFileSrv
61   3C 00014C70 EfsDllReprotectFile
62   3D 0000AFC0 EfsDllSetFileEncryptionKeySrv
63   3E 0000C190 EfsDllShareDecline
64   3F 0000ABE0 EfsDllSsoFlushUserCache
65   40 0000ABB0 EfsDllUnloadUserProfile
66   41 0000B040 EfsDllUsePinForEncryptedFilesSrv
67   42 0000ABD0 EfsDllValidateEfsStream
68   43 0000A620 EfsDllWriteEncryptedFileWithHeader
69   44 0000A610 EfsDllWriteFileRaw
70   45 0000A4D0 EfsInitialize
71   46 0001CF00 EfsProcessRecoveryPolicy
72   47 0000A590 EfsUnInitialize
73   48 00022EA0 EfsValidateEfsStream

Información avanzada sobre funciones que tiene la dll efscore.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\efscore.dll

File Type: DLL

  Section contains the following exports for EFSCORE.dll

    00000000 characteristics
    DDF45642 time date stamp
        0.00 version
           1 ordinal base
          73 number of functions
          73 number of names

    ordinal hint RVA      name

          2    0 00041010 EdpDllAllowFileAccessForProcess
          3    1 0000CDB0 EdpDllCredSvcControl
          4    2 0000C240 EdpDllCredentialCreate
          5    3 0000C520 EdpDllCredentialDelete
          6    4 0000C420 EdpDllCredentialExists
          7    5 0000C330 EdpDllCredentialQuery
          8    6 0000CD40 EdpDllDplUpgradePinInfo
          9    7 0000CD60 EdpDllDplUpgradeVerifyUser
         10    8 0000CD80 EdpDllDplUserCredentialsSet
         11    9 0000CDA0 EdpDllDplUserUnlockComplete
         12    A 0000CDA0 EdpDllDplUserUnlockStart
         13    B 0000CB80 EdpDllGetCredServiceState
         14    C 0000C940 EdpDllGetLockSessionUnwrappedKey
         15    D 0000C8D0 EdpDllGetLockSessionWrappedKey
         16    E 00041CB0 EdpDllGetTfaCache
         17    F 00044940 EdpDllPurgeAppLearningEvents
         18   10 0000C7F0 EdpDllQueryDplEnforcedPolicyOwnerIds
         19   11 0000C700 EdpDllQueryRevokedPolicyOwnerIds
         20   12 0003DE70 EdpDllQueueFileForEncryption
         21   13 0000CF00 EdpDllRmsClearKeys
         22   14 0000CF20 EdpDllRmsContainerizeFile
         23   15 0000D5D0 EdpDllRmsDecontainerizeFile
         24   16 0000D2C0 EdpDllRmsGetContainerIdentity
         25   17 0003DFE0 EdpDllServiceFileEncryptionQueue
         26   18 00044960 EdpWriteAppLearningLog
         27   19 00044B30 EdpWriteSiteLearningLog
         28   1A 0000AEF0 EfsDllAddUsersToFileSrv
         29   1B 0000C100 EfsDllAllocateHeap
         30   1C 0000D890 EfsDllCheckFileAccess
         31   1D 0000A5F0 EfsDllCloseFileRaw
         32   1E 0000B340 EfsDllConstructEFS
         33   1F 0000BF20 EfsDllDecryptFek
         34   20 0000AC20 EfsDllDecryptFileSrv
         35   21 0000A6F0 EfsDllDisabled
          1   22 0000DA10 EfsDllDplAppKeyCachingFeatureEnabled
         36   23 0000B020 EfsDllDuplicateEncryptionInfoFileSrv
         37   24 0000AC10 EfsDllEncryptFileSrv
         38   25 0000C0F0 EfsDllErrorToNtStatus
         39   26 0000B030 EfsDllFileKeyInfoSrv
         40   27 0000C140 EfsDllFreeHeap
         41   28 0000AB90 EfsDllFreeUserInfo
         42   29 0000C180 EfsDllGetLocalFileName
         43   2A 0000A710 EfsDllGetLogFile
         44   2B 0000AB80 EfsDllGetUserInfo
         45   2C 0000A700 EfsDllGetVolumeRoot
         46   2D 0000C620 EfsDllIsConsumerProtectionEnforced
         47   2E 0000A6E0 EfsDllIsNonEfsSKU
         48   2F 0000ABA0 EfsDllLoadUserProfile
         49   30 0000ABC0 EfsDllMarkFileForDelete
         50   31 0000D870 EfsDllOefsAcquireExclusiveOperation
         51   32 00048930 EfsDllOefsCheckSupportByFilePath
         52   33 0000D880 EfsDllOefsReleaseExclusiveOperation
         53   34 0000A720 EfsDllOnSessionChange
         54   35 0000A940 EfsDllOnSessionUserChange
         55   36 0000A5D0 EfsDllOpenFileRaw
         56   37 0000AE30 EfsDllQueryProtectorsSrv
         57   38 0000AD30 EfsDllQueryRecoveryAgentsSrv
         58   39 0000AC30 EfsDllQueryUsersOnFileSrv
         59   3A 0000A600 EfsDllReadFileRaw
         60   3B 0000AF60 EfsDllRemoveUsersFromFileSrv
         61   3C 00014C70 EfsDllReprotectFile
         62   3D 0000AFC0 EfsDllSetFileEncryptionKeySrv
         63   3E 0000C190 EfsDllShareDecline
         64   3F 0000ABE0 EfsDllSsoFlushUserCache
         65   40 0000ABB0 EfsDllUnloadUserProfile
         66   41 0000B040 EfsDllUsePinForEncryptedFilesSrv
         67   42 0000ABD0 EfsDllValidateEfsStream
         68   43 0000A620 EfsDllWriteEncryptedFileWithHeader
         69   44 0000A610 EfsDllWriteFileRaw
         70   45 0000A4D0 EfsInitialize
         71   46 0001CF00 EfsProcessRecoveryPolicy
         72   47 0000A590 EfsUnInitialize
         73   48 00022EA0 EfsValidateEfsStream

  Summary

        4000 .data
        1000 .didat
        6000 .pdata
       32000 .rdata
        2000 .reloc
        5000 .rsrc
       DF000 .text

Integridad de la dll efscore.dll



Algorithm       Hash                                                                   Path                                         
---------       ----                                                                   ----                                         
SHA256          6EEE058FB679E49D0BB344AD984B4FF12AD80A5296EB8E26CC6639C0FBFB2D57       C:\Windows\System32\efscore.dll              


Detalles sobre el fichero dll efscore.dll




PSPath            : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\efscore.dll
PSParentPath      : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName       : efscore.dll
PSDrive           : C
PSProvider        : Microsoft.PowerShell.Core\FileSystem
PSIsContainer     : False
Mode              : -a----
VersionInfo       : File:             C:\Windows\System32\efscore.dll
                    InternalName:     EFSCORE.DLL
                    OriginalFilename: EFSCORE.DLL.MUI
                    FileVersion:      10.0.19041.561 (WinBuild.160101.0800)
                    FileDescription:  Biblioteca principal de EFS
                    Product:          Sistema operativo Microsoft® Windows®
                    ProductVersion:   10.0.19041.561
                    Debug:            False
                    Patched:          False
                    PreRelease:       False
                    PrivateBuild:     False
                    SpecialBuild:     False
                    Language:         Español (España, internacional)
                    
BaseName          : efscore
Target            : {C:\Windows\WinSxS\amd64_microsoft-windows-efs-core-library_31bf3856ad364e35_10.0.19041.1_none_0c92f10936e8155b\
                    efscore.dll}
LinkType          : HardLink
Name              : efscore.dll
Length            : 1177912
DirectoryName     : C:\Windows\System32
Directory         : C:\Windows\System32
IsReadOnly        : False
Exists            : True
FullName          : C:\Windows\System32\efscore.dll
Extension         : .dll
CreationTime      : 07/12/2019 10:08:52
CreationTimeUtc   : 07/12/2019 9:08:52
LastAccessTime    : 03/12/2020 10:28:36
LastAccessTimeUtc : 03/12/2020 9:28:36
LastWriteTime     : 07/12/2019 10:08:52
LastWriteTimeUtc  : 07/12/2019 9:08:52
Attributes        : Archive



Procesos que utilizan la dll efscore.dll