untfs.dll

  • File Path: C:\Windows\system32\untfs.dll
  • Description: NTFS Utility DLL

Hashes

Type Hash
MD5 1ADD711580A8145B1C229FA49D45E5D8
SHA1 D697831FA5BDFE17F70FB31D811825817C2D28D5
SHA256 0A4CE1B7ED9E7DF96FAF45F83ED1C30D2DA7B33E7D7A02FAEA1D5B9481E5EAC8
SHA384 AAB9B92E4190A381B1230F13C5EF7CF52F7907FF5C3F753DDE0FC2C78CD0BA68F7FDAFAB0EF91CF944113F0542AF1C53
SHA512 1E10DC65E589F1D39A10D4CA635CEE631B880C6B162CA41C7010F129B971C88F993312C9322C7610D1A47B730AA3E9F7A5124365CE06D670CD5AF12879587124
SSDEEP 6144:ChALFMA92noDEjgnLFMi0FqInT+ro0Hf1Z/hLNgtagERtbQck58su03n0gudN0TW:zKnOYgL6FxTQo0Umfy58qktM+bfBLG
IMP 71D14EA646846084074E24324292EF7D
PESHA1 ECBF9029185ABE211165C5F7AF71061AF6EBBED1
PE256 038381CCA63EB9893F0AFA180BD947D50040D758E75604AFF831C6EBCF5E7D5D

DLL Exports:

Function Name Ordinal Type
NTFS_MFT_FILE::Flush 58 Exported Function
NTFS_MASTER_FILE_TABLE::Extend 56 Exported Function
NTFS_MFT_FILE::Initialize 86 Exported Function
NTFS_MFT_INFO::Initialize 88 Exported Function
NTFS_MFT_INFO::Initialize 87 Exported Function
NTFS_INDEX_TREE::Save 144 Exported Function
NTFS_INDEX_TREE::ResetIterator 140 Exported Function
NTFS_LOG_FILE::CreateDataAttribute 54 Exported Function
NTFS_MASTER_FILE_TABLE::AllocateFileRecordSegment 47 Exported Function
NTFS_LOG_FILE::Initialize 85 Exported Function
NTFS_SA::TakeCensus 149 Exported Function
NTFS_SA::SetVolumeFlag 147 Exported Function
NTFS_SA::WriteRemainingBootCode 155 Exported Function
NTFS_UPCASE_TABLE::Initialize 93 Exported Function
NTFS_UPCASE_FILE::Initialize 91 Exported Function
NTFS_SA::CreateElementaryStructures 55 Exported Function
NTFS_REFLECTED_MASTER_FILE_TABLE::Initialize 89 Exported Function
NTFS_SA::Initialize 90 Exported Function
NTFS_SA::Read 132 Exported Function
NTFS_SA::QueryFrsFromPath 120 Exported Function
NTFS_INDEX_TREE::ResetIterator 141 Exported Function
NTFS_FRS_STRUCTURE::Prefetch 105 Exported Function
NTFS_FRS_STRUCTURE::Initialize 79 Exported Function
NTFS_FRS_STRUCTURE::QueryAttributeList 108 Exported Function
NTFS_FRS_STRUCTURE::ReadAgain 134 Exported Function
NTFS_FRS_STRUCTURE::Read 129 Exported Function
NTFS_FILE_RECORD_SEGMENT::QueryFileSizes 118 Exported Function
NTFS_FILE_RECORD_SEGMENT::QueryDuplicatedInformation 113 Exported Function
NTFS_FRS_STRUCTURE::Initialize 80 Exported Function
NTFS_FRS_STRUCTURE::Initialize 82 Exported Function
NTFS_FRS_STRUCTURE::Initialize 81 Exported Function
NTFS_INDEX_TREE::Initialize 83 Exported Function
NTFS_INDEX_TREE::Initialize 84 Exported Function
NTFS_INDEX_TREE::InsertEntry 96 Exported Function
NTFS_INDEX_TREE::QueryFileReference 117 Exported Function
NTFS_INDEX_TREE::QueryEntry 114 Exported Function
NTFS_FRS_STRUCTURE::ReadNext 137 Exported Function
NTFS_FRS_STRUCTURE::ReadAt 135 Exported Function
NTFS_FRS_STRUCTURE::SafeQueryAttribute 143 Exported Function
NTFS_INDEX_TREE::CopyIterator 52 Exported Function
NTFS_FRS_STRUCTURE::Write 153 Exported Function
NTFS_UPCASE_TABLE::Initialize 92 Exported Function
NTFS_ATTRIBUTE::InsertIntoFile 97 Exported Function
NTFS_ATTRIBUTE::GrowSparse 63 Exported Function
NTFS_ATTRIBUTE::MakeNonresident 103 Exported Function
NTFS_ATTRIBUTE::SetSparse 146 Exported Function
NTFS_ATTRIBUTE::Resize 142 Exported Function
public: virtual __cdecl NTFS_SA::~NTFS_SA(void) __ptr64 39 Exported Function
public: virtual __cdecl NTFS_REFLECTED_MASTER_FILE_TABLE::~NTFS_REFLECTED_MASTER_FILE_TABLE(void) __ptr64 38 Exported Function
public: virtual __cdecl NTFS_UPCASE_FILE::~NTFS_UPCASE_FILE(void) __ptr64 40 Exported Function
public: virtual __cdecl NTFS_VOLUME_FILE::~NTFS_VOLUME_FILE(void) __ptr64 42 Exported Function
public: virtual __cdecl NTFS_UPCASE_TABLE::~NTFS_UPCASE_TABLE(void) __ptr64 41 Exported Function
NTFS_CLUSTER_RUN::Relocate 139 Exported Function
NTFS_FRS_STRUCTURE::GetNextAttributeRecord 61 Exported Function
Recover 167 Exported Function
SetWriteViewCacheVolumeName 148 Exported Function
SetOriginalVolumeName 145 Exported Function
NTFS_FILE_RECORD_SEGMENT::Write 152 Exported Function
NTFS_ATTRIBUTE::Write 150 Exported Function
NTFS_FRS_STRUCTURE::Read 130 Exported Function
NTFS_SA::Read 133 Exported Function
NTFS_MFT_FILE::Read 131 Exported Function
public: virtual __cdecl NTFS_MFT_INFO::~NTFS_MFT_INFO(void) __ptr64 37 Exported Function
public: virtual __cdecl NTFS_ATTRIBUTE_DEFINITION_TABLE::~NTFS_ATTRIBUTE_DEFINITION_TABLE(void) __ptr64 23 Exported Function
public: virtual __cdecl NTFS_ATTRIBUTE::~NTFS_ATTRIBUTE(void) __ptr64 22 Exported Function
public: virtual __cdecl NTFS_ATTRIBUTE_LIST::~NTFS_ATTRIBUTE_LIST(void) __ptr64 24 Exported Function
public: virtual __cdecl NTFS_BAD_CLUSTER_FILE::~NTFS_BAD_CLUSTER_FILE(void) __ptr64 26 Exported Function
public: virtual __cdecl NTFS_ATTRIBUTE_RECORD::~NTFS_ATTRIBUTE_RECORD(void) __ptr64 25 Exported Function
NTFS_VOLUME_FILE::Initialize 95 Exported Function
NTFS_UPCASE_TABLE::Initialize 94 Exported Function
NTFS_EXTENT_LIST::QueryNumberOfExtents 124 Exported Function
NTFS_SA::QueryVolumeFlagsAndLabel 127 Exported Function
NTFS_SA::QueryClusterFactor 110 Exported Function
public: virtual __cdecl NTFS_FRS_STRUCTURE::~NTFS_FRS_STRUCTURE(void) __ptr64 33 Exported Function
public: virtual __cdecl NTFS_FILE_RECORD_SEGMENT::~NTFS_FILE_RECORD_SEGMENT(void) __ptr64 32 Exported Function
public: virtual __cdecl NTFS_INDEX_TREE::~NTFS_INDEX_TREE(void) __ptr64 34 Exported Function
public: virtual __cdecl NTFS_MFT_FILE::~NTFS_MFT_FILE(void) __ptr64 36 Exported Function
public: virtual __cdecl NTFS_LOG_FILE::~NTFS_LOG_FILE(void) __ptr64 35 Exported Function
public: virtual __cdecl NTFS_BITMAP_FILE::~NTFS_BITMAP_FILE(void) __ptr64 28 Exported Function
public: virtual __cdecl NTFS_BITMAP::~NTFS_BITMAP(void) __ptr64 27 Exported Function
public: virtual __cdecl NTFS_BOOT_FILE::~NTFS_BOOT_FILE(void) __ptr64 29 Exported Function
public: virtual __cdecl NTFS_EXTENT_LIST::~NTFS_EXTENT_LIST(void) __ptr64 31 Exported Function
public: virtual __cdecl NTFS_CLUSTER_RUN::~NTFS_CLUSTER_RUN(void) __ptr64 30 Exported Function
NTFS_FILE_RECORD_SEGMENT::QueryAttributeListAttribute 109 Exported Function
NTFS_MFT_FILE::NTFS_MFT_FILE 15 Exported Function
NTFS_LOG_FILE::NTFS_LOG_FILE 14 Exported Function
NTFS_MFT_INFO::NTFS_MFT_INFO 16 Exported Function
NTFS_SA::NTFS_SA 18 Exported Function
NTFS_REFLECTED_MASTER_FILE_TABLE::NTFS_REFLECTED_MASTER_FILE_TABLE 17 Exported Function
NTFS_EXTENT_LIST::NTFS_EXTENT_LIST 10 Exported Function
NTFS_CLUSTER_RUN::NTFS_CLUSTER_RUN 9 Exported Function
NTFS_FILE_RECORD_SEGMENT::NTFS_FILE_RECORD_SEGMENT 11 Exported Function
NTFS_INDEX_TREE::NTFS_INDEX_TREE 13 Exported Function
NTFS_FRS_STRUCTURE::NTFS_FRS_STRUCTURE 12 Exported Function
NTFS_MFT_INFO::CompareFileName 49 Exported Function
NTFS_MFT_INFO::CompareDupInfo 48 Exported Function
NTFS_MFT_INFO::QueryFlags 119 Exported Function
NTFS_SA::IsDosName 100 Exported Function
NTFS_SA::GetRootFrsIndex 62 Exported Function
NTFS_UPCASE_TABLE::NTFS_UPCASE_TABLE 20 Exported Function
NTFS_UPCASE_FILE::NTFS_UPCASE_FILE 19 Exported Function
NTFS_VOLUME_FILE::NTFS_VOLUME_FILE 21 Exported Function
NTFS_MFT_INFO::QuerySegmentReference 126 Exported Function
NTFS_ATTRIBUTE::QueryClustersAllocated 111 Exported Function
NTFS_BOOT_FILE::NTFS_BOOT_FILE 8 Exported Function
FormatCorruptionRecordA 162 Exported Function
Format 161 Exported Function
FormatCorruptionRecordW 163 Exported Function
GetFilesystemInformation 165 Exported Function
FormatEx 164 Exported Function
ChkdskEx 157 Exported Function
Chkdsk 156 Exported Function
CreateFormatCorruptionRecordContext 158 Exported Function
Extend 160 Exported Function
DeleteFormatCorruptionRecordContext 159 Exported Function
NTFS_ATTRIBUTE_RECORD::NTFS_ATTRIBUTE_RECORD 4 Exported Function
NTFS_ATTRIBUTE_LIST::NTFS_ATTRIBUTE_LIST 3 Exported Function
NTFS_BAD_CLUSTER_FILE::NTFS_BAD_CLUSTER_FILE 5 Exported Function
NTFS_BITMAP_FILE::NTFS_BITMAP_FILE 7 Exported Function
NTFS_BITMAP::NTFS_BITMAP 6 Exported Function
NTFS_MFT_INFO::ComputeDupInfoSignature 50 Exported Function
NtfsUpcaseCompare 166 Exported Function
NTFS_MFT_INFO::ComputeFileNameSignature 51 Exported Function
NTFS_ATTRIBUTE_DEFINITION_TABLE::NTFS_ATTRIBUTE_DEFINITION_TABLE 2 Exported Function
NTFS_ATTRIBUTE::NTFS_ATTRIBUTE 1 Exported Function
NTFS_SA::IsNtfsName 102 Exported Function
NTFS_EXTENT_LIST::QueryLcnFromVcn 121 Exported Function
NTFS_EXTENT_LIST::QueryExtent 115 Exported Function
NTFS_FILE_RECORD_SEGMENT::AddFileNameAttribute 44 Exported Function
NTFS_FILE_RECORD_SEGMENT::AddSecurityDescriptorData 46 Exported Function
NTFS_FILE_RECORD_SEGMENT::AddSecurityDescriptor 45 Exported Function
NTFS_BOOT_FILE::Initialize 71 Exported Function
NTFS_BITMAP_FILE::Initialize 70 Exported Function
NTFS_CLUSTER_RUN::Initialize 72 Exported Function
NTFS_EXTENT_LIST::Initialize 73 Exported Function
NTFS_EXTENT_LIST::AddExtent 43 Exported Function
NTFS_FILE_RECORD_SEGMENT::Initialize 75 Exported Function
NTFS_FILE_RECORD_SEGMENT::Initialize 76 Exported Function
NTFS_FILE_RECORD_SEGMENT::IsAttributePresent 99 Exported Function
NTFS_FILE_RECORD_SEGMENT::QueryAttributeByOrdinal 107 Exported Function
NTFS_FILE_RECORD_SEGMENT::QueryAttribute 106 Exported Function
NTFS_FILE_RECORD_SEGMENT::Flush 57 Exported Function
NTFS_FILE_RECORD_SEGMENT::Create 53 Exported Function
NTFS_FILE_RECORD_SEGMENT::Initialize 74 Exported Function
NTFS_FILE_RECORD_SEGMENT::Initialize 78 Exported Function
NTFS_FILE_RECORD_SEGMENT::Initialize 77 Exported Function
NTFS_BITMAP::WriteModified 154 Exported Function
NTFS_ATTRIBUTE::Prefetch 104 Exported Function
NTFS_ATTRIBUTE::Initialize 65 Exported Function
NTFS_ATTRIBUTE::Read 128 Exported Function
NTFS_ATTRIBUTE_DEFINITION_TABLE::Initialize 66 Exported Function
NTFS_ATTRIBUTE::ReadWithAltExtents 138 Exported Function
NTFS_SA::QuerySectorsInElementaryStructures 125 Exported Function
NTFS_SA::QueryDefaultClustersPerIndexBuffer 112 Exported Function
NTFS_ATTRIBUTE_LIST::GetNextAttributeListEntry 60 Exported Function
NTFS_ATTRIBUTE::Initialize 64 Exported Function
NTFS_INDEX_TREE::GetNext 59 Exported Function
NTFS_BITMAP::Initialize 69 Exported Function
NTFS_BAD_CLUSTER_FILE::Initialize 68 Exported Function
NTFS_BITMAP::IsAllocated 98 Exported Function
NTFS_BITMAP::Write 151 Exported Function
NTFS_BITMAP::IsFree 101 Exported Function
NTFS_ATTRIBUTE_LIST::ReadList 136 Exported Function
NTFS_ATTRIBUTE_LIST::QueryNextEntry 123 Exported Function
NTFS_ATTRIBUTE_RECORD::Initialize 67 Exported Function
NTFS_ATTRIBUTE_RECORD::QueryName 122 Exported Function
NTFS_ATTRIBUTE_RECORD::QueryExtentList 116 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: UNTFS.DLL
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/0a4ce1b7ed9e7df96faf45f83ed1c30d2da7b33e7d7a02faea1d5b9481e5eac8/detection/

MIT License. Copyright (c) 2020-2021 Strontic.