uReFS.dll

  • File Path: C:\Windows\system32\uReFS.dll
  • Description: NTFS Utility DLL

Hashes

Type Hash
MD5 2B8715A88AF91E309593DC9D5138EF67
SHA1 70BD73FB5C90DEB843D5E784E0BC1E4D489B2C13
SHA256 0964F4241B0E7D5CDF8ECC0D41FC9D856E69FA82D3D9FFD3918E03CADFF54FC2
SHA384 679F305B3DA092671617E20C27458FED4A3080B45424F5F33E44BB8DBEE0C6E354E130C2D9E70270C5EB201137C890C3
SHA512 52DE66E211C725C313CC104FE91DFF8856BFF036CD2AD4E1A38A15746C57466A3F980B84327F0FA9A9F632D168A174873860F17A9D8FD39198D084E144452965
SSDEEP 12288:Uv+82PV/gBIWrGyAx33enurIRufeel4e1KR2qtJqcpi9wFt9fZSj96+:Uy94WW5AlOnurIRseFe1KcuJqckOSs+
IMP C7A5987D7EDCD1D59E64226B90497543
PESHA1 D3F51E00D1E34ABAE7919ABA3FA37BF306F38E46
PE256 81A15F339B1797DDA6B5F13868952646461257BEF945029B38300380295F23BD

DLL Exports:

Function Name Ordinal Type
public: virtual __cdecl REFS_SA::~REFS_SA(void) __ptr64 3 Exported Function
REFS_SA::Initialize 11 Exported Function
REFS_UPCASE_TABLE::REFS_UPCASE_TABLE 2 Exported Function
SetOriginalVolumeName 13 Exported Function
Recover 12 Exported Function
public: virtual __cdecl REFS_UPCASE_TABLE::~REFS_UPCASE_TABLE(void) __ptr64 4 Exported Function
REFS_SA::REFS_SA 1 Exported Function
Extend 7 Exported Function
ChkdskEx 6 Exported Function
Chkdsk 5 Exported Function
GetFilesystemInformation 10 Exported Function
FormatEx 9 Exported Function
Format 8 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: UNTFS.DLL
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/0964f4241b0e7d5cdf8ecc0d41fc9d856e69fa82d3d9ffd3918e03cadff54fc2/detection/

MIT License. Copyright (c) 2020-2021 Strontic.