ReAgent.dll

  • File Path: C:\Windows\system32\ReAgent.dll
  • Description: Microsoft Windows Recovery Agent DLL

Hashes

Type Hash
MD5 1F00DEB1937EF7BAE7EE04862016DFEF
SHA1 7D20E9428A54AE76C03546C9B3AF2D12B24668B8
SHA256 CE63360B378C46A318AFA6BDDE13D0DD3942F6FDC761BA7E712725B470757E10
SHA384 CA0E3F07D925CD32D6673C3273D73AA47D4CC2E09D53AB33968C56B6537954E329AB4A363ACB136796D98C9A973CDD45
SHA512 33A7CA68316115D58C77AA54160AA273257A37B17B14CE2D5BDB06F94FA2E048BD41CB47AD3AECA600322CB20EDA9BF9EFFB0FB68C9ABD29321573DE12E9E640
SSDEEP 12288:IY1VeBzytVWK+MuEszVQl9jx6Kfo39009VM+boauAtGvHb8bJkh5Txd/hu:bamtVfdsugbGUVJoauAO73hFxu
IMP 45C05CF60EB55AA41050E0F77AD50D40
PESHA1 CD55990C908379F176508C0BAB193B89531A13F6
PE256 C97172E211018980BE8AC5745DDEFD25F3ACB04FA0D05598F25BF60FCCB9CDA4

DLL Exports:

Function Name Ordinal Type
WinReRestoreLogFiles 38 Exported Function
WinReRestoreConfigAfterPBR 4 Exported Function
WinReRepair 37 Exported Function
WinReSetBootApp 39 Exported Function
WinReSetError 42 Exported Function
WinReSetCustomization 41 Exported Function
WinReSetConfig 40 Exported Function
WinReOpenLogInstance 32 Exported Function
WinReOobeInstall 31 Exported Function
WinReIsWinPE 30 Exported Function
WinRePostBCDRepair 33 Exported Function
WinReRemoveTrustedBootApp 36 Exported Function
WinReReinstall 35 Exported Function
WinReQueueRecoveryBoot 34 Exported Function
WinReSetNarratorScheduled 43 Exported Function
WinReUnInstall 53 Exported Function
WinReSetupSetImage 52 Exported Function
WinReSetupRestoreWinREEx 51 Exported Function
WinReUpdateLogInstance 54 Exported Function
WinReValidateWimFile 56 Exported Function
WinReValidateRecoveryWim 55 Exported Function
WinREUseNewPBRImage 6 Exported Function
WinReSetupBackupWinRE 46 Exported Function
WinReSetTriggerFile 45 Exported Function
WinReSetRecoveryAction 44 Exported Function
WinReSetupCheckWinRE 47 Exported Function
WinReSetupRemoveWinRE 50 Exported Function
WinReSetupMigrateData 49 Exported Function
WinReSetupInstall 48 Exported Function
WinReCopyDiagnosticFiles 12 Exported Function
WinReConfigureTask 11 Exported Function
WinReClearOemImagePath 3 Exported Function
WinReCopyLogFilesToRamdisk 13 Exported Function
WinReDeleteLogFiles 16 Exported Function
WinReCreateLogInstanceEx 15 Exported Function
WinReCreateLogInstance 14 Exported Function
WinRE_Specialize_Offline 2 Exported Function
WinRE_Specialize 1 Exported Function
WinRE_Generalize 7 Exported Function
WinReAddTrustedBootApp 8 Exported Function
WinReClearError 10 Exported Function
WinReClearBootApp 9 Exported Function
WinRECheckGuid 5 Exported Function
winreFindInstallMedia 57 Exported Function
WinReInitiateOfflineScanning 25 Exported Function
WinReHashWimFile 24 Exported Function
WinReHashBootApp 23 Exported Function
WinReInstall 26 Exported Function
WinReIsWimBootEnabled 29 Exported Function
WinReIsInstalledOnSystemPartition 28 Exported Function
WinReInstallOnTargetOS 27 Exported Function
WinReGetCustomization 18 Exported Function
WinReGetConfig 17 Exported Function
winreGetBinaryArch 58 Exported Function
WinReGetError 19 Exported Function
WinReGetWIMInfo 22 Exported Function
WinReGetTrustedBootApps 21 Exported Function
WinReGetLogDirPath 20 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: reagent.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/ce63360b378c46a318afa6bdde13d0dd3942f6fdc761ba7e712725b470757e10/detection/

MIT License. Copyright (c) 2020-2021 Strontic.