CmdID / Files

rdvgumd64.dll

Microsoft RemoteFX Virtual GPU file version info

Library on Windows 1 known copy with hashes

Is it the real rdvgumd64.dll?

file version info and known copies

Installed inC:\Windows\system32\DriverStore\FileRepository\rdvgwddmdx11.inf_amd64_bffbb9fc8456e0d3\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionMicrosoft RemoteFX Virtual GPU

1 known copy

10.0.19041.488 (WinBuild.160101.0800) · C:\Windows\system32\DriverStore\FileRepository\rdvgwddmdx11.inf_amd64_bffbb9fc8456e0d3\rdvgumd64.dll · signed by Microsoft Windows

ee966ace7fea7ba26398327cc8e01b0e56a225528433cf572f8738e203d48b76

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.