RDVGHelper.exe
RemoteFX Helper file version info
Program on Windows 5 known copies with hashes
Is it the real RDVGHelper.exe?
C:\Windows\system32\5 known copies
1, 1, 0, 0 · C:\WINDOWS\system32\RDVGHelper.exe · signed by Microsoft Windows
7c5cfe31d3e800347d5706e06e3e71821a0e905c947ec5e201a2c4f4b5e78a591, 1, 0, 0 · C:\Windows\system32\RDVGHelper.exe · signed by Microsoft Windows
8b578e0dc5bac0d60b946a41c69138e30e5eb6c43b05ea706ee6d48bb3df317a1, 1, 0, 0 · C:\Windows\system32\RDVGHelper.exe · signed by Microsoft Windows
96c0a412f8508aeae9d893f8bd6108fafdbaf43ce70c143cdea4abe0f7b1351f1, 1, 0, 0 · C:\Windows\system32\RDVGHelper.exe · signed by Microsoft Windows
c2e3492335492e6599f20d614666e57573b9fda31bad29d3040f0d2610e438ea1, 1, 0, 0 · C:\Windows\system32\RDVGHelper.exe · signed by Microsoft Windows
ca4c0e31bb8ddf99b5f3df595b09fb4bc93a1cc7d465adc289488d16683cd935From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.