Versions

4.3.2.6	4.23%
4.3.1.3	2.11%
4.3.0.32	0.70%
4.3.0.18	0.70%
4.2.1.12	20.42%
4.2.0.53	16.20%
4.1.1.10	0.70%
4.1.1.9	21.83%
4.1.0.23	0.70%
4.0.0.139	19.72%
3.0.2.34	1.41%
3.0.1.9	0.70%
3.0.1.6	0.70%
3.0.0.131	0.70%
2.2.1.4	0.70%
2.2.0.69	0.70%
2.1.4.2	3.52%
2.1.3.3	1.41%
2.0.4.2	2.11%
2.0.0.115	0.70%

efacli64.dll has 20 known versions, the most recent one is 4.3.2.6. The average file size is about 102.5 KB. It is an authenticode code-signed executable issued to Symantec Corporation by the certification authority VeriSign. The programs Symantec Endpoint Protection, Norton Internet Security and Norton Internet Security CBE have been observed as installing specific variations of efacli64.dll. This is a .NET Common Language Runtime (CLR) assembly.

Symantec Extended File Attributes is part of Norton Internet Security, a PC program that provides malware prevention and removal during subscription period and uses signatures and heuristics to identify viruses, trojans and other malware. Norton Internet Security features include a email spam filtering, personal firewall, and phishing protection.