uReFS.dll

  • File Path: C:\Windows\SysWOW64\uReFS.dll
  • Description: NTFS Utility DLL

Hashes

Type Hash
MD5 D8D28E227581A40ABC4476AD3651C5A9
SHA1 6E1FE9A7B35D0E2F4E845C4C0666D9C161E538C6
SHA256 32ECBA4EFBCD99AAE72A1944A9CC5D3F581996AC9C37D3675B7BFF909AA51A9D
SHA384 0C391F5D432CF3FCD048F0D4B955403C936A7A398B0A8F397E1E937C637F1A68F77FBD1DF465CACE723EA33B074C92C9
SHA512 4DFA023C255278AA81757686158BC231FD5F0C34AC329AAFA190C47840EBF1B01C3CCF017F192E0F05D5CDDAF929FFC4211935167A68A9AF9ED589BA316F44DB
SSDEEP 12288:BzC0bL7ls+8ghxUjNuuxXHDuWKjYVG99QdlZt88bjrgFGOfJIcD9TkhOth9hoSCN:B+0q+dxeuuwWFkgzZS0jrNyrhEy94
IMP C48A0985713363912E0FFBC591201BA2
PESHA1 408B1545412F4E687E0ACAB520C2800A73B2A1F4
PE256 C62B84E04E8E185DD8A39070AD81F1F76C2561B04CE7276AD5B08764F0A8CFC6

DLL Exports:

Function Name Ordinal Type
public: virtual __thiscall REFS_SA::~REFS_SA(void) 3 Exported Function
REFS_SA::Initialize 11 Exported Function
REFS_UPCASE_TABLE::REFS_UPCASE_TABLE 2 Exported Function
SetOriginalVolumeName 13 Exported Function
Recover 12 Exported Function
public: virtual __thiscall REFS_UPCASE_TABLE::~REFS_UPCASE_TABLE(void) 4 Exported Function
REFS_SA::REFS_SA 1 Exported Function
Extend 7 Exported Function
ChkdskEx 6 Exported Function
Chkdsk 5 Exported Function
GetFilesystemInformation 10 Exported Function
FormatEx 9 Exported Function
Format 8 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: UNTFS.DLL
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/32ecba4efbcd99aae72a1944a9cc5d3f581996ac9c37d3675b7bff909aa51a9d/detection/

MIT License. Copyright (c) 2020-2021 Strontic.