¿Para qué sirve la dll efswrt.dll?
Storage Protection Windows Runtime DLLDependencias de la dll efswrt.dll
Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation. All rights reserved.
Dump of file C:\Windows\System32\efswrt.dll
File Type: DLL
Image has the following dependencies:
msvcrt.dll
api-ms-win-core-libraryloader-l1-2-0.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-synch-l1-1-0.dll
api-ms-win-core-heap-l1-1-0.dll
api-ms-win-core-errorhandling-l1-1-0.dll
api-ms-win-core-winrt-string-l1-1-0.dll
api-ms-win-core-util-l1-1-0.dll
api-ms-win-eventing-classicprovider-l1-1-0.dll
api-ms-win-core-processthreads-l1-1-0.dll
api-ms-win-core-winrt-error-l1-1-0.dll
api-ms-win-core-localization-l1-2-0.dll
api-ms-win-core-debug-l1-1-0.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-eventing-provider-l1-1-0.dll
api-ms-win-core-com-l1-1-0.dll
api-ms-win-core-registry-l1-1-0.dll
api-ms-win-core-string-l1-1-0.dll
api-ms-win-core-threadpool-l1-2-0.dll
api-ms-win-core-file-l1-1-0.dll
api-ms-win-security-base-l1-1-0.dll
RPCRT4.dll
api-ms-win-core-com-midlproxystub-l1-1-0.dll
api-ms-win-core-rtlsupport-l1-1-0.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-sysinfo-l1-1-0.dll
api-ms-win-core-winrt-error-l1-1-1.dll
api-ms-win-core-winrt-l1-1-0.dll
api-ms-win-core-processthreads-l1-1-1.dll
api-ms-win-core-com-l1-1-1.dll
api-ms-win-core-file-l2-1-0.dll
OLEAUT32.dll
api-ms-win-core-heap-l2-1-0.dll
api-ms-win-security-sddl-l1-1-0.dll
api-ms-win-core-file-l1-2-0.dll
api-ms-win-core-path-l1-1-0.dll
MPR.dll
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
api-ms-win-core-winrt-robuffer-l1-1-0.dll
api-ms-win-appmodel-runtime-l1-1-0.dll
api-ms-win-appmodel-runtime-l1-1-1.dll
api-ms-win-core-marshal-l1-1-0.dll
api-ms-win-core-apiquery-l1-1-0.dll
api-ms-win-core-url-l1-1-0.dll
api-ms-win-appmodel-runtime-internal-l1-1-3.dll
combase.dll
ntdll.dll
api-ms-win-service-private-l1-1-0.dll
api-ms-win-core-processenvironment-l1-1-0.dll
api-ms-win-core-psapi-l1-1-0.dll
api-ms-win-core-delayload-l1-1-1.dll
api-ms-win-core-delayload-l1-1-0.dll
Image has the following delay load dependencies:
ncrypt.dll
ext-ms-win-winrt-storage-l1-1-0.dll
ext-ms-win-rtcore-ntuser-cursor-l1-1-0.dll
api-ms-win-rtcore-ntuser-synch-l1-1-0.dll
api-ms-win-rtcore-ntuser-window-l1-1-0.dll
ext-ms-win-security-efs-l1-1-0.dll
api-ms-win-shcore-thread-l1-1-0.dll
api-ms-win-shcore-taskpool-l1-1-0.dll
ext-ms-win-ntuser-private-l1-1-1.dll
ext-ms-win-devmgmt-policy-l1-1-0.dll
api-ms-win-appmodel-state-l1-2-0.dll
ext-ms-win-session-usertoken-l1-1-0.dll
ext-ms-win-rdr-davhlpr-l1-1-0.dll
ext-ms-win-fveapi-query-l1-1-0.dll
ext-ms-win-session-usermgr-l1-1-0.dll
ext-ms-win-shell32-shellfolders-l1-1-0.dll
ext-ms-onecore-appmodel-staterepository-cache-l1-1-0.dll
ext-ms-onecore-appmodel-staterepository-cache-l1-1-2.dll
FirewallAPI.dll
iertutil.dll
VAULTCLI.dll
FeClient.dll
twinapi.appcore.dll
edputil.dll
SHCORE.dll
CRYPT32.dll
ext-ms-win-ntuser-uicontext-ext-l1-1-0.dll
Summary
2000 .data
1000 .didat
6000 .pdata
46000 .rdata
5000 .reloc
2000 .rsrc
86000 .text
Funciones que tiene la dll efswrt.dll
1 0 00018AC0 CdplGetFileProtectionLevel
2 1 00018F00 CdplIsAppAllowedToRun
3 2 0000EB70 CdplIsAppDataProtectionSupported
4 3 00019870 CdplIsSupported
5 4 00018980 CdplProtectFileToLevel
6 5 00018810 CdplProtectFileToLevelWithResult
7 6 00018B10 CdplProtectKnownUserFolders
8 7 00018E20 CdplProtectSecretToLevel
9 8 00018EE0 CdplUnprotectSecret
10 9 00005B30 DllCanUnloadNow
11 A 00005BA0 DllGetActivationFactory
12 B 00005D80 DllGetClassObject
13 C 0000EA40 DpmBufferFree
14 D 0000E670 DpmProtectSecretToIdentity
15 E 0000EA30 DpmStreamClose
16 F 0000E850 DpmStreamOpenToProtectToIdentity
17 10 0000E940 DpmStreamOpenToUnprotect
18 11 0000EA20 DpmStreamUpdate
19 12 0000E7D0 DpmUnprotectSecret
20 13 0000D000 EnterpriseDataCopyProtection
21 14 0000D8D0 EnterpriseDataGetStatus
22 15 0000CA10 EnterpriseDataProtect
23 16 0000D3D0 EnterpriseDataRevoke
24 17 0000E640 FreeIdentityProtectorList
25 18 0000DE70 GetEnterpriseActionForCopy
26 19 0000DC40 GetEnterpriseIdForNetworkPath
27 1A 0000EA50 ProtectFileToEnterpriseIdentity
28 1B 0000CE80 ProtectFileToIdentity
29 1C 0000EAA0 ProtectOrReprotectFileToIdentity
30 1D 0000E410 QueryIdentityProtectors
31 1E 0000EA70 UnprotectFile
Información avanzada sobre funciones que tiene la dll efswrt.dll
Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation. All rights reserved.
Dump of file C:\Windows\System32\efswrt.dll
File Type: DLL
Section contains the following exports for efswrt.dll
00000000 characteristics
CD8ABEB3 time date stamp
0.00 version
1 ordinal base
31 number of functions
31 number of names
ordinal hint RVA name
1 0 00018AC0 CdplGetFileProtectionLevel
2 1 00018F00 CdplIsAppAllowedToRun
3 2 0000EB70 CdplIsAppDataProtectionSupported
4 3 00019870 CdplIsSupported
5 4 00018980 CdplProtectFileToLevel
6 5 00018810 CdplProtectFileToLevelWithResult
7 6 00018B10 CdplProtectKnownUserFolders
8 7 00018E20 CdplProtectSecretToLevel
9 8 00018EE0 CdplUnprotectSecret
10 9 00005B30 DllCanUnloadNow
11 A 00005BA0 DllGetActivationFactory
12 B 00005D80 DllGetClassObject
13 C 0000EA40 DpmBufferFree
14 D 0000E670 DpmProtectSecretToIdentity
15 E 0000EA30 DpmStreamClose
16 F 0000E850 DpmStreamOpenToProtectToIdentity
17 10 0000E940 DpmStreamOpenToUnprotect
18 11 0000EA20 DpmStreamUpdate
19 12 0000E7D0 DpmUnprotectSecret
20 13 0000D000 EnterpriseDataCopyProtection
21 14 0000D8D0 EnterpriseDataGetStatus
22 15 0000CA10 EnterpriseDataProtect
23 16 0000D3D0 EnterpriseDataRevoke
24 17 0000E640 FreeIdentityProtectorList
25 18 0000DE70 GetEnterpriseActionForCopy
26 19 0000DC40 GetEnterpriseIdForNetworkPath
27 1A 0000EA50 ProtectFileToEnterpriseIdentity
28 1B 0000CE80 ProtectFileToIdentity
29 1C 0000EAA0 ProtectOrReprotectFileToIdentity
30 1D 0000E410 QueryIdentityProtectors
31 1E 0000EA70 UnprotectFile
Summary
2000 .data
1000 .didat
6000 .pdata
46000 .rdata
5000 .reloc
2000 .rsrc
86000 .text
Integridad de la dll efswrt.dll
Algorithm Hash Path
--------- ---- ----
SHA256 D405C7803A86C75E5D878458C2CCA781AAC426F3DE7FE05D1E968222F9AB0631 C:\Windows\System32\efswrt.dll
Detalles sobre el fichero dll efswrt.dll
PSPath : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\efswrt.dll
PSParentPath : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName : efswrt.dll
PSDrive : C
PSProvider : Microsoft.PowerShell.Core\FileSystem
PSIsContainer : False
Mode : -a----
VersionInfo : File: C:\Windows\System32\efswrt.dll
InternalName: efswrt.dll
OriginalFilename: efswrt.dll
FileVersion: 10.0.19041.488 (WinBuild.160101.0800)
FileDescription: Storage Protection Windows Runtime DLL
Product: Microsoft® Windows® Operating System
ProductVersion: 10.0.19041.488
Debug: False
Patched: False
PreRelease: False
PrivateBuild: False
SpecialBuild: False
Language: Inglés (Estados Unidos)
BaseName : efswrt
Target : {C:\Windows\WinSxS\amd64_microsoft-windows-s..lerevocationmanager_31bf3856ad364e35_10.0.19041.488_none_f552aff7a
cd73a18\efswrt.dll}
LinkType : HardLink
Name : efswrt.dll
Length : 885760
DirectoryName : C:\Windows\System32
Directory : C:\Windows\System32
IsReadOnly : False
Exists : True
FullName : C:\Windows\System32\efswrt.dll
Extension : .dll
CreationTime : 20/09/2020 15:03:33
CreationTimeUtc : 20/09/2020 13:03:33
LastAccessTime : 03/12/2020 10:29:23
LastAccessTimeUtc : 03/12/2020 9:29:23
LastWriteTime : 20/09/2020 15:03:33
LastWriteTimeUtc : 20/09/2020 13:03:33
Attributes : Archive
Procesos que utilizan la dll efswrt.dll