efsext.dll - Online Dependency Analysis & Download

Description

EFSEXT.DLL

Authors

File size

73.5 KB

Uploaded

2025-12-01 07:27

Views

109

SHA-256

2e977dd8e42a135b4a5852443c375c5a

Security warning

This file has been flagged as potentially dangerous, and downloads are disabled.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported functions 12

EdpPlatform_QueryUserSessionState #1 · 0x4780

EdpPlatform_RegisterUserSessionNotification #2 · 0x4740

EdpPlatform_ShowDialog #3 · 0x4490

EdpPlatform_ShowUI #4 · 0x4700

EdpPlatform_UnregisterUserSessionNotification #5 · 0x36c0

EfsPlatform_GetCallerID #6 · 0x3af0

EfsPlatform_IsCallerAutomaticallyDelegated #7 · 0x3db0

EfsPlatform_LaunchPromptUI #8 · 0x3ef0

EfsPlatform_SuspendNotificationsAndEncryptFile #9 · 0x3a30

EfsPlatform_UnpackSecurePin #10 · 0x4170

FVE_LaunchConsentPromptUI #11 · 0x4ac0

FVE_LaunchSDCardUI #12 · 0x4ca0

Imported DLLs & functions 159

api-ms-win-appmodel-runtime-l1-1-0.dll 6

ClosePackageInfo 0x18000cab0

GetCurrentPackageInfo 0x18000ca98

GetPackageFamilyName 0x18000ca90

GetPackageFullName 0x18000ca88

GetPackageInfo 0x18000caa0

OpenPackageInfoByFullName 0x18000caa8

api-ms-win-core-com-l1-1-0.dll 8

CoCreateFreeThreadedMarshaler 0x18000cac0

CoCreateInstance 0x18000caf8

CoGetMalloc 0x18000cae0

CoInitializeEx 0x18000cad0

CoTaskMemAlloc 0x18000cad8

CoTaskMemFree 0x18000cac8

CoTaskMemRealloc 0x18000caf0

CoUninitialize 0x18000cae8

api-ms-win-core-debug-l1-1-0.dll 3

DebugBreak 0x18000cb10

IsDebuggerPresent 0x18000cb18

OutputDebugStringW 0x18000cb08

api-ms-win-core-delayload-l1-1-0.dll 1

DelayLoadFailureHook 0x18000cb28

api-ms-win-core-delayload-l1-1-1.dll 1

ResolveDelayLoadedAPI 0x18000cb38

api-ms-win-core-errorhandling-l1-1-0.dll 4

GetLastError 0x18000cb50

SetLastError 0x18000cb58

SetUnhandledExceptionFilter 0x18000cb48

UnhandledExceptionFilter 0x18000cb60

api-ms-win-core-handle-l1-1-0.dll 1

CloseHandle 0x18000cb70

api-ms-win-core-heap-l1-1-0.dll 3

GetProcessHeap 0x18000cb88

HeapAlloc 0x18000cb80

HeapFree 0x18000cb90

api-ms-win-core-heap-l2-1-0.dll 2

LocalAlloc 0x18000cba0

LocalFree 0x18000cba8

api-ms-win-core-libraryloader-l1-2-0.dll 8

FindResourceExW 0x18000cbc8

GetModuleFileNameA 0x18000cbe0

GetModuleHandleExW 0x18000cbd8

GetModuleHandleW 0x18000cbe8

GetProcAddress 0x18000cbf0

LoadResource 0x18000cbb8

LoadStringW 0x18000cbd0

LockResource 0x18000cbc0

api-ms-win-core-localization-l1-2-0.dll 1

FormatMessageW 0x18000cc00

api-ms-win-core-processthreads-l1-1-0.dll 8

CreateProcessAsUserW 0x18000cc28

GetCurrentProcess 0x18000cc18

GetCurrentProcessId 0x18000cc10

GetCurrentThread 0x18000cc40

GetCurrentThreadId 0x18000cc38

OpenProcessToken 0x18000cc20

OpenThreadToken 0x18000cc48

TerminateProcess 0x18000cc30

api-ms-win-core-processthreads-l1-1-1.dll 1

OpenProcess 0x18000cc58

api-ms-win-core-profile-l1-1-0.dll 1

QueryPerformanceCounter 0x18000cc68

api-ms-win-core-psapi-l1-1-0.dll 1

QueryFullProcessImageNameW 0x18000cc78

api-ms-win-core-registry-l1-1-0.dll 5

RegCloseKey 0x18000cc98

RegCreateKeyExW 0x18000cca0

RegOpenCurrentUser 0x18000cc90

RegOpenKeyExW 0x18000cc88

RegQueryValueExW 0x18000cca8

api-ms-win-core-registry-l1-1-1.dll 2

RegDeleteKeyValueW 0x18000ccb8

RegSetKeyValueW 0x18000ccc0

api-ms-win-core-rtlsupport-l1-1-0.dll 3

RtlCaptureContext 0x18000ccd0

RtlLookupFunctionEntry 0x18000cce0

RtlVirtualUnwind 0x18000ccd8

api-ms-win-core-string-l1-1-0.dll 1

CompareStringOrdinal 0x18000ccf0

api-ms-win-core-synch-l1-1-0.dll 9

CreateEventW 0x18000cd20

CreateMutexExW 0x18000cd30

CreateSemaphoreExW 0x18000cd40

OpenSemaphoreW 0x18000cd00

ReleaseMutex 0x18000cd08

ReleaseSemaphore 0x18000cd18

SetEvent 0x18000cd10

WaitForSingleObject 0x18000cd38

WaitForSingleObjectEx 0x18000cd28

api-ms-win-core-synch-l1-2-0.dll 1

Sleep 0x18000cd50

api-ms-win-core-sysinfo-l1-1-0.dll 3

GetSystemTimeAsFileTime 0x18000cd68

GetSystemWindowsDirectoryW 0x18000cd70

GetTickCount 0x18000cd60

api-ms-win-eventing-classicprovider-l1-1-0.dll 1

TraceMessage 0x18000cd80

api-ms-win-eventing-provider-l1-1-0.dll 4

EventRegister 0x18000cda0

EventSetInformation 0x18000cda8

EventUnregister 0x18000cd90

EventWriteTransfer 0x18000cd98

api-ms-win-security-base-l1-1-0.dll 5

AllocateAndInitializeSid 0x18000cdd8

DuplicateTokenEx 0x18000cdd0

EqualSid 0x18000cdb8

FreeSid 0x18000cdc8

GetTokenInformation 0x18000cdc0

api-ms-win-security-credentials-l1-1-0.dll 1

CredUnprotectW 0x18000cde8

api-ms-win-security-sddl-l1-1-0.dll 1

ConvertStringSidToSidW 0x18000cdf8

api-ms-win-service-management-l1-1-0.dll 4

CloseServiceHandle 0x18000ce10

OpenSCManagerW 0x18000ce18

OpenServiceW 0x18000ce20

StartServiceW 0x18000ce08

api-ms-win-service-winsvc-l1-1-0.dll 1

QueryServiceStatus 0x18000ce30

api-ms-win-shcore-taskpool-l1-1-0.dll 1

SHTaskPoolQueueTask 0x18000ce40

CRYPT32.dll 2

CryptBinaryToStringW 0x18000c940

CryptStringToBinaryA 0x18000c938

DUI70.dll 20

?_ZeroRelease@Value@DirectUI@@AEAAXXZ 0x18000c988

?AddListener@Element@DirectUI@@QEAAJPEAUIElementListener@2@@Z 0x18000c9b0

?Click@TouchButton@DirectUI@@SA?AVUID@@XZ 0x18000c9a8

?Create@DUIXmlParser@DirectUI@@SAJPEAPEAV12@P6APEAVValue@2@PEBGPEAX@Z2P6AX11H2@Z2@Z 0x18000c9c8

?CreateBool@Value@DirectUI@@SAPEAV12@_N@Z 0x18000c980

?CreateElement@DUIXmlParser@DirectUI@@QEAAJPEBGPEAVElement@2@1PEAKPEAPEAV32@@Z 0x18000c9b8

?Destroy@DUIXmlParser@DirectUI@@QEAAXXZ 0x18000c9d0

?FindDescendent@Element@DirectUI@@QEAAPEAV12@G@Z 0x18000c9e8

?GetCheckedState@TouchCheckBox@DirectUI@@QEAA?AW4CheckedStateFlags@2@XZ 0x18000c998

?GetClassInfoPtr@TouchCheckBox@DirectUI@@SAPEAUIClassInfo@2@XZ 0x18000c950

?GetClassInfoPtr@TouchHyperLink@DirectUI@@SAPEAUIClassInfo@2@XZ 0x18000c958

?MultipleClick@TouchButton@DirectUI@@SA?AVUID@@XZ 0x18000c9a0

?SetValue@Element@DirectUI@@QEAAJP6APEBUPropertyInfo@2@XZHPEAVValue@2@@Z 0x18000c978

?SetXMLFromResource@DUIXmlParser@DirectUI@@QEAAJIPEAUHINSTANCE__@@0@Z 0x18000c9c0

?VisibleProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ 0x18000c970

InitProcessPriv 0x18000c968

InitThread 0x18000c9d8

StrToID 0x18000c990

UnInitProcessPriv 0x18000c960

UnInitThread 0x18000c9e0

msvcrt.dll 25

__C_specific_handler 0x18000ce80

__CxxFrameHandler3 0x18000ce78

__dllonexit 0x18000ce68

_amsg_exit 0x18000ce98

_callnewh 0x18000cef0

_CxxThrowException 0x18000cec0

_initterm 0x18000ce88

_lock 0x18000cf08

_onexit 0x18000ce60

_purecall 0x18000ceb0

_unlock 0x18000ce70

_vsnprintf_s 0x18000ced0

_vsnwprintf 0x18000cee0

_XcptFilter 0x18000cea0

??0exception@@QEAA@AEBV0@@Z 0x18000cee8

??0exception@@QEAA@XZ 0x18000cec8

??1exception@@UEAA@XZ 0x18000cf00

??1type_info@@UEAA@XZ 0x18000ce58

free 0x18000cea8

malloc 0x18000ce90

memcpy 0x18000ce50

memcpy_s 0x18000ced8

memset 0x18000cf10

wcschr 0x18000cef8

wcsncmp 0x18000ceb8

ntdll.dll 6

NtQueryInformationToken 0x18000cf28

RtlAllocateHeap 0x18000cf38

RtlCompareUnicodeString 0x18000cf48

RtlFreeHeap 0x18000cf20

RtlInitUnicodeString 0x18000cf30

RtlNtStatusToDosErrorNoTeb 0x18000cf40

RPCRT4.dll 8

NdrClientCall3 0x18000ca08

RpcBindingFree 0x18000ca30

RpcBindingFromStringBindingW 0x18000ca10

RpcBindingSetAuthInfoExW 0x18000ca20

RpcImpersonateClient 0x18000ca00

RpcRevertToSelf 0x18000c9f8

RpcStringBindingComposeW 0x18000ca18

RpcStringFreeW 0x18000ca28

SHELL32.dll 6

0x18000ca40

0x18000ca50

0x18000ca60

SHChangeNotifySuspendResume 0x18000ca58

ShellExecuteExW 0x18000ca48

ShellExecuteW 0x18000ca68

USER32.dll 1

MsgWaitForMultipleObjects 0x18000ca78