| Windows 8 DLL File Information - efssvc.dll |
The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 8, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.
General Information
| File Description: | EFS Service |
| File Version: | 6.2.9200.16384 (win8_rtm.120725-1247) |
| Company: | Microsoft Corporation |
| Product Name: | Microsoft® Windows® Operating System |
| DLL popularity | Very Low - There is no any other DLL in system32 directory that is statically linked to this file. |
| File Size: | 26 KB |
| Total Number of Exported Functions: | 1 |
| Total Number of Exported Functions With Names: | 1 |
Section Headers
| Name | Virtual Address | Raw Data Size | % of File | Characteristics | Section Contains... |
|---|---|---|---|---|---|
| .text | 0x00001000 | 16,896 Bytes | 62.3% | Read, Execute | Code |
| .data | 0x00006000 | 512 Bytes | 1.9% | Write, Read | Initialized Data |
| .idata | 0x00007000 | 4,096 Bytes | 15.1% | Read | Initialized Data |
| .rsrc | 0x00008000 | 2,560 Bytes | 9.4% | Read | Initialized Data |
| .reloc | 0x00009000 | 2,048 Bytes | 7.5% | Read, Discardable | Initialized Data |
Static Linking
efssvc.dll is statically linked to the following files:msvcrt.dll
ntdll.dll
RPCRT4.dll
api-ms-win-service-core-l1-1-1.dll
api-ms-win-service-management-l1-1-0.dll
api-ms-win-service-management-l2-1-0.dll
EFSCORE.dll
KERNEL32.dll
api-ms-win-security-base-l1-2-0.dll
This means that when efssvc.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, efssvc.dll won't be loaded.
General Resources Information
| Resource Type | Number of Items | Total Size | % of File |
|---|---|---|---|
| Icons | 0 | 0 Bytes | 0.0% |
| Animated Icons | 0 | 0 Bytes | 0.0% |
| Cursors | 0 | 0 Bytes | 0.0% |
| Animated Cursors | 0 | 0 Bytes | 0.0% |
| Bitmaps | 0 | 0 Bytes | 0.0% |
| AVI Files | 0 | 0 Bytes | 0.0% |
| Dialog-Boxes | 0 | 0 Bytes | 0.0% |
| HTML Related Files | 0 | 0 Bytes | 0.0% |
| Menus | 0 | 0 Bytes | 0.0% |
| Strings | 2 | 484 Bytes | 1.8% |
| Type Libraries | 0 | 0 Bytes | 0.0% |
| Manifest | 0 | 0 Bytes | 0.0% |
| All Others | 4 | 1,826 Bytes | 6.7% |
| Total | 6 | 2,310 Bytes | 8.5% |
Icons in this file
No icons found in this file
Cursors in this file
No cursors found in this file
Dialog-boxes list (up to 200 dialogs)
No dialog resources in this file.
String resources in this dll (up to 200 strings)
| String ID | String Text |
|---|---|
| 100 | Encrypting File System (EFS) |
| 101 | Provides the core file encryption technology used to store encrypted files on NTFS file system volumes. If this service is stopped or disabled, applications will be unable to access encrypted files. |
COM Classes/Interfaces
There is no type library in this file with COM classes/interfaces information
Exported Functions List
The following functions are exported by this dll:| EfsServiceMain |
Imported Functions List
The following functions are imported by this dll:- msvcrt.dll:
_XcptFilter _amsg_exit _except_handler4_common _initterm _wcsicmp free malloc memcpy memset void * __cdecl operator new(unsigned int) void __cdecl operator delete(void *) - ntdll.dll:
EtwEventEnabled EtwEventRegister EtwEventUnregister EtwEventWrite NtClearEvent NtClose NtCreateEvent NtOpenEvent NtOpenThreadToken NtQueryInformationToken NtSetEvent RtlAllocateHeap RtlFreeHeap RtlInitUnicodeString RtlNtStatusToDosError RtlValidRelativeSecurityDescriptor RtlValidSid - RPCRT4.dll:
I_RpcBindingIsClientLocal NdrServerCall2 RpcBindingToStringBindingW RpcImpersonateClient RpcRaiseException RpcRevertToSelf RpcServerInqCallAttributesW RpcServerRegisterAuthInfoW RpcServerRegisterIf3 RpcServerRegisterIfEx RpcServerUnregisterIfEx RpcServerUseProtseqEpW RpcStringBindingParseW RpcStringFreeW - api-ms-win-service-core-l1-1-1.dll:
sechost!RegisterServiceCtrlHandlerExW sechost!SetServiceStatus - api-ms-win-service-management-l1-1-0.dll:
sechost!CloseServiceHandle sechost!OpenSCManagerW sechost!OpenServiceW - api-ms-win-service-management-l2-1-0.dll:
sechost!ChangeServiceConfigW - EFSCORE.dll:
EfsDllAddUsersToFileSrv EfsDllCloseFileRaw EfsDllConstructEFS EfsDllDecryptFek EfsDllDecryptFileSrv EfsDllDisabled EfsDllDuplicateEncryptionInfoFileSrv EfsDllEncryptFileSrv EfsDllErrorToNtStatus EfsDllFileKeyInfoSrv EfsDllFreeHeap EfsDllFreeUserInfo EfsDllGetLocalFileName EfsDllGetLogFile EfsDllGetUserInfo EfsDllGetVolumeRoot EfsDllIsNonEfsSKU EfsDllLoadUserProfile EfsDllMarkFileForDelete EfsDllOnSessionChange EfsDllOpenFileRaw EfsDllQueryRecoveryAgentsSrv EfsDllQueryUsersOnFileSrv EfsDllReadFileRaw EfsDllRemoveUsersFromFileSrv EfsDllSetFileEncryptionKeySrv EfsDllShareDecline EfsDllSsoFlushUserCache EfsDllUnloadUserProfile EfsDllUsePinForEncryptedFilesSrv EfsDllValidateEfsStream EfsDllWriteFileRaw EfsInitialize EfsUnInitialize - KERNEL32.dll:
CloseHandle CreateEventW CreateFileW DelayLoadFailureHook GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetFileAttributesW GetLastError GetProcessHeap GetSystemTimeAsFileTime GetTickCount HeapFree InterlockedCompareExchange InterlockedExchange LocalFree QueryPerformanceCounter SetEvent SetUnhandledExceptionFilter Sleep TerminateProcess UnhandledExceptionFilter ntdll!LdrResolveDelayLoadedAPI ntdll!RtlAllocateHeap - api-ms-win-security-base-l1-2-0.dll:
KernelBase!IsWellKnownSid