untfs.dll

  • File Path: C:\Windows\SysWOW64\untfs.dll
  • Description: NTFS Utility DLL

Hashes

Type Hash
MD5 E7D07346E258621E8A0D0E5DDD303429
SHA1 B6E6F8047B3EB59D9C250FBABAEBEA1504594295
SHA256 E3E5BAD8F802A2811A912043E878BAE0F29BDDAED6D27DEC340F0D147534FABE
SHA384 08B2FDFC231A2F94BB2F11E07FC5DC8F805E16A20415405437550244A0A3820097E45EFBEC075D2EAE71843C7AA13C1F
SHA512 2FD124470EE0E4A90BCF1A0C36E08F8C65A176DA70985B736609CF66A512007C02C11660AC89AB3103FECF74CC768C53EBBF08260203BCAD9D55C1DEEDC53E69
SSDEEP 12288:wvf5B62TJxOivT0pumKPg4vvhfENGDtgPYco0/kQ:wvfnd1x7vT0puPg4vv9ENG5oj/k
IMP C9767640961FDDF0566CEA4FD2554E39
PESHA1 FFCF9FDB9780A47C37F011329757E9D963BDE936
PE256 CFF875A81E065559D0CDF899895632A314B6368ABA466E723F0C9F5DFEC00771

DLL Exports:

Function Name Ordinal Type
NTFS_MFT_FILE::Flush 58 Exported Function
NTFS_MASTER_FILE_TABLE::Extend 56 Exported Function
NTFS_MFT_FILE::Initialize 86 Exported Function
NTFS_MFT_INFO::Initialize 88 Exported Function
NTFS_MFT_INFO::Initialize 87 Exported Function
NTFS_INDEX_TREE::Save 144 Exported Function
NTFS_INDEX_TREE::ResetIterator 140 Exported Function
NTFS_LOG_FILE::CreateDataAttribute 54 Exported Function
NTFS_MASTER_FILE_TABLE::AllocateFileRecordSegment 47 Exported Function
NTFS_LOG_FILE::Initialize 85 Exported Function
NTFS_SA::TakeCensus 149 Exported Function
NTFS_SA::SetVolumeFlag 147 Exported Function
NTFS_SA::WriteRemainingBootCode 155 Exported Function
NTFS_UPCASE_TABLE::Initialize 93 Exported Function
NTFS_UPCASE_FILE::Initialize 91 Exported Function
NTFS_SA::CreateElementaryStructures 55 Exported Function
NTFS_REFLECTED_MASTER_FILE_TABLE::Initialize 89 Exported Function
NTFS_SA::Initialize 90 Exported Function
NTFS_SA::Read 132 Exported Function
NTFS_SA::QueryFrsFromPath 120 Exported Function
NTFS_INDEX_TREE::ResetIterator 141 Exported Function
NTFS_FRS_STRUCTURE::Prefetch 105 Exported Function
NTFS_FRS_STRUCTURE::Initialize 79 Exported Function
NTFS_FRS_STRUCTURE::QueryAttributeList 108 Exported Function
NTFS_FRS_STRUCTURE::ReadAgain 134 Exported Function
NTFS_FRS_STRUCTURE::Read 129 Exported Function
NTFS_FILE_RECORD_SEGMENT::QueryFileSizes 118 Exported Function
NTFS_FILE_RECORD_SEGMENT::QueryDuplicatedInformation 113 Exported Function
NTFS_FRS_STRUCTURE::Initialize 80 Exported Function
NTFS_FRS_STRUCTURE::Initialize 82 Exported Function
NTFS_FRS_STRUCTURE::Initialize 81 Exported Function
NTFS_INDEX_TREE::Initialize 83 Exported Function
NTFS_INDEX_TREE::Initialize 84 Exported Function
NTFS_INDEX_TREE::InsertEntry 96 Exported Function
NTFS_INDEX_TREE::QueryFileReference 117 Exported Function
NTFS_INDEX_TREE::QueryEntry 114 Exported Function
NTFS_FRS_STRUCTURE::ReadNext 137 Exported Function
NTFS_FRS_STRUCTURE::ReadAt 135 Exported Function
NTFS_FRS_STRUCTURE::SafeQueryAttribute 143 Exported Function
NTFS_INDEX_TREE::CopyIterator 52 Exported Function
NTFS_FRS_STRUCTURE::Write 153 Exported Function
NTFS_UPCASE_TABLE::Initialize 92 Exported Function
NTFS_ATTRIBUTE::InsertIntoFile 97 Exported Function
NTFS_ATTRIBUTE::GrowSparse 63 Exported Function
NTFS_ATTRIBUTE::MakeNonresident 103 Exported Function
NTFS_ATTRIBUTE::SetSparse 146 Exported Function
NTFS_ATTRIBUTE::Resize 142 Exported Function
public: virtual __thiscall NTFS_SA::~NTFS_SA(void) 39 Exported Function
public: virtual __thiscall NTFS_REFLECTED_MASTER_FILE_TABLE::~NTFS_REFLECTED_MASTER_FILE_TABLE(void) 38 Exported Function
public: virtual __thiscall NTFS_UPCASE_FILE::~NTFS_UPCASE_FILE(void) 40 Exported Function
public: virtual __thiscall NTFS_VOLUME_FILE::~NTFS_VOLUME_FILE(void) 42 Exported Function
public: virtual __thiscall NTFS_UPCASE_TABLE::~NTFS_UPCASE_TABLE(void) 41 Exported Function
NTFS_CLUSTER_RUN::Relocate 139 Exported Function
NTFS_FRS_STRUCTURE::GetNextAttributeRecord 61 Exported Function
Recover 167 Exported Function
SetWriteViewCacheVolumeName 148 Exported Function
SetOriginalVolumeName 145 Exported Function
NTFS_FILE_RECORD_SEGMENT::Write 152 Exported Function
NTFS_ATTRIBUTE::Write 150 Exported Function
NTFS_FRS_STRUCTURE::Read 130 Exported Function
NTFS_SA::Read 133 Exported Function
NTFS_MFT_FILE::Read 131 Exported Function
public: virtual __thiscall NTFS_MFT_INFO::~NTFS_MFT_INFO(void) 37 Exported Function
public: virtual __thiscall NTFS_ATTRIBUTE_DEFINITION_TABLE::~NTFS_ATTRIBUTE_DEFINITION_TABLE(void) 23 Exported Function
public: virtual __thiscall NTFS_ATTRIBUTE::~NTFS_ATTRIBUTE(void) 22 Exported Function
public: virtual __thiscall NTFS_ATTRIBUTE_LIST::~NTFS_ATTRIBUTE_LIST(void) 24 Exported Function
public: virtual __thiscall NTFS_BAD_CLUSTER_FILE::~NTFS_BAD_CLUSTER_FILE(void) 26 Exported Function
public: virtual __thiscall NTFS_ATTRIBUTE_RECORD::~NTFS_ATTRIBUTE_RECORD(void) 25 Exported Function
NTFS_VOLUME_FILE::Initialize 95 Exported Function
NTFS_UPCASE_TABLE::Initialize 94 Exported Function
NTFS_EXTENT_LIST::QueryNumberOfExtents 124 Exported Function
NTFS_SA::QueryVolumeFlagsAndLabel 127 Exported Function
NTFS_SA::QueryClusterFactor 110 Exported Function
public: virtual __thiscall NTFS_FRS_STRUCTURE::~NTFS_FRS_STRUCTURE(void) 33 Exported Function
public: virtual __thiscall NTFS_FILE_RECORD_SEGMENT::~NTFS_FILE_RECORD_SEGMENT(void) 32 Exported Function
public: virtual __thiscall NTFS_INDEX_TREE::~NTFS_INDEX_TREE(void) 34 Exported Function
public: virtual __thiscall NTFS_MFT_FILE::~NTFS_MFT_FILE(void) 36 Exported Function
public: virtual __thiscall NTFS_LOG_FILE::~NTFS_LOG_FILE(void) 35 Exported Function
public: virtual __thiscall NTFS_BITMAP_FILE::~NTFS_BITMAP_FILE(void) 28 Exported Function
public: virtual __thiscall NTFS_BITMAP::~NTFS_BITMAP(void) 27 Exported Function
public: virtual __thiscall NTFS_BOOT_FILE::~NTFS_BOOT_FILE(void) 29 Exported Function
public: virtual __thiscall NTFS_EXTENT_LIST::~NTFS_EXTENT_LIST(void) 31 Exported Function
public: virtual __thiscall NTFS_CLUSTER_RUN::~NTFS_CLUSTER_RUN(void) 30 Exported Function
NTFS_FILE_RECORD_SEGMENT::QueryAttributeListAttribute 109 Exported Function
NTFS_MFT_FILE::NTFS_MFT_FILE 15 Exported Function
NTFS_LOG_FILE::NTFS_LOG_FILE 14 Exported Function
NTFS_MFT_INFO::NTFS_MFT_INFO 16 Exported Function
NTFS_SA::NTFS_SA 18 Exported Function
NTFS_REFLECTED_MASTER_FILE_TABLE::NTFS_REFLECTED_MASTER_FILE_TABLE 17 Exported Function
NTFS_EXTENT_LIST::NTFS_EXTENT_LIST 10 Exported Function
NTFS_CLUSTER_RUN::NTFS_CLUSTER_RUN 9 Exported Function
NTFS_FILE_RECORD_SEGMENT::NTFS_FILE_RECORD_SEGMENT 11 Exported Function
NTFS_INDEX_TREE::NTFS_INDEX_TREE 13 Exported Function
NTFS_FRS_STRUCTURE::NTFS_FRS_STRUCTURE 12 Exported Function
NTFS_MFT_INFO::CompareFileName 49 Exported Function
NTFS_MFT_INFO::CompareDupInfo 48 Exported Function
NTFS_MFT_INFO::QueryFlags 119 Exported Function
NTFS_SA::IsDosName 100 Exported Function
NTFS_SA::GetRootFrsIndex 62 Exported Function
NTFS_UPCASE_TABLE::NTFS_UPCASE_TABLE 20 Exported Function
NTFS_UPCASE_FILE::NTFS_UPCASE_FILE 19 Exported Function
NTFS_VOLUME_FILE::NTFS_VOLUME_FILE 21 Exported Function
NTFS_MFT_INFO::QuerySegmentReference 126 Exported Function
NTFS_ATTRIBUTE::QueryClustersAllocated 111 Exported Function
NTFS_BOOT_FILE::NTFS_BOOT_FILE 8 Exported Function
FormatCorruptionRecordA 162 Exported Function
Format 161 Exported Function
FormatCorruptionRecordW 163 Exported Function
GetFilesystemInformation 165 Exported Function
FormatEx 164 Exported Function
ChkdskEx 157 Exported Function
Chkdsk 156 Exported Function
CreateFormatCorruptionRecordContext 158 Exported Function
Extend 160 Exported Function
DeleteFormatCorruptionRecordContext 159 Exported Function
NTFS_ATTRIBUTE_RECORD::NTFS_ATTRIBUTE_RECORD 4 Exported Function
NTFS_ATTRIBUTE_LIST::NTFS_ATTRIBUTE_LIST 3 Exported Function
NTFS_BAD_CLUSTER_FILE::NTFS_BAD_CLUSTER_FILE 5 Exported Function
NTFS_BITMAP_FILE::NTFS_BITMAP_FILE 7 Exported Function
NTFS_BITMAP::NTFS_BITMAP 6 Exported Function
NTFS_MFT_INFO::ComputeDupInfoSignature 50 Exported Function
NtfsUpcaseCompare 166 Exported Function
NTFS_MFT_INFO::ComputeFileNameSignature 51 Exported Function
NTFS_ATTRIBUTE_DEFINITION_TABLE::NTFS_ATTRIBUTE_DEFINITION_TABLE 2 Exported Function
NTFS_ATTRIBUTE::NTFS_ATTRIBUTE 1 Exported Function
NTFS_SA::IsNtfsName 102 Exported Function
NTFS_EXTENT_LIST::QueryLcnFromVcn 121 Exported Function
NTFS_EXTENT_LIST::QueryExtent 115 Exported Function
NTFS_FILE_RECORD_SEGMENT::AddFileNameAttribute 44 Exported Function
NTFS_FILE_RECORD_SEGMENT::AddSecurityDescriptorData 46 Exported Function
NTFS_FILE_RECORD_SEGMENT::AddSecurityDescriptor 45 Exported Function
NTFS_BOOT_FILE::Initialize 71 Exported Function
NTFS_BITMAP_FILE::Initialize 70 Exported Function
NTFS_CLUSTER_RUN::Initialize 72 Exported Function
NTFS_EXTENT_LIST::Initialize 73 Exported Function
NTFS_EXTENT_LIST::AddExtent 43 Exported Function
NTFS_FILE_RECORD_SEGMENT::Initialize 75 Exported Function
NTFS_FILE_RECORD_SEGMENT::Initialize 76 Exported Function
NTFS_FILE_RECORD_SEGMENT::IsAttributePresent 99 Exported Function
NTFS_FILE_RECORD_SEGMENT::QueryAttributeByOrdinal 107 Exported Function
NTFS_FILE_RECORD_SEGMENT::QueryAttribute 106 Exported Function
NTFS_FILE_RECORD_SEGMENT::Flush 57 Exported Function
NTFS_FILE_RECORD_SEGMENT::Create 53 Exported Function
NTFS_FILE_RECORD_SEGMENT::Initialize 74 Exported Function
NTFS_FILE_RECORD_SEGMENT::Initialize 78 Exported Function
NTFS_FILE_RECORD_SEGMENT::Initialize 77 Exported Function
NTFS_BITMAP::WriteModified 154 Exported Function
NTFS_ATTRIBUTE::Prefetch 104 Exported Function
NTFS_ATTRIBUTE::Initialize 65 Exported Function
NTFS_ATTRIBUTE::Read 128 Exported Function
NTFS_ATTRIBUTE_DEFINITION_TABLE::Initialize 66 Exported Function
NTFS_ATTRIBUTE::ReadWithAltExtents 138 Exported Function
NTFS_SA::QuerySectorsInElementaryStructures 125 Exported Function
NTFS_SA::QueryDefaultClustersPerIndexBuffer 112 Exported Function
NTFS_ATTRIBUTE_LIST::GetNextAttributeListEntry 60 Exported Function
NTFS_ATTRIBUTE::Initialize 64 Exported Function
NTFS_INDEX_TREE::GetNext 59 Exported Function
NTFS_BITMAP::Initialize 69 Exported Function
NTFS_BAD_CLUSTER_FILE::Initialize 68 Exported Function
NTFS_BITMAP::IsAllocated 98 Exported Function
NTFS_BITMAP::Write 151 Exported Function
NTFS_BITMAP::IsFree 101 Exported Function
NTFS_ATTRIBUTE_LIST::ReadList 136 Exported Function
NTFS_ATTRIBUTE_LIST::QueryNextEntry 123 Exported Function
NTFS_ATTRIBUTE_RECORD::Initialize 67 Exported Function
NTFS_ATTRIBUTE_RECORD::QueryName 122 Exported Function
NTFS_ATTRIBUTE_RECORD::QueryExtentList 116 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: UNTFS.DLL
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/e3e5bad8f802a2811a912043e878bae0f29bddaed6d27dec340f0d147534fabe/detection/

MIT License. Copyright (c) 2020-2021 Strontic.