rfxvmt.dll

  • File Path: C:\Windows\system32\rfxvmt.dll
  • Description: Microsoft RemoteFX VM Transport

Hashes

Type Hash
MD5 4210156EE0B0BE3BF76A7A33951BD44A
SHA1 B865CE2BEE57B25FB1B7BCC61E720269DEE8002C
SHA256 9DBE260E03CED0B4CD16F35DEE14BD04463CA7B6E7127AA785F93A61330E4A2E
SHA384 F5C7AC72F24D5F0ADA162C65DA4FE622A8437F088427EF05927B4C109577BEFE7AB779FCC46AA9DD0B59179AE3607FB1
SHA512 0CEC05FB817FD7F3368CC6BCC2DF683AD0D09EFF2A86300D849A37A14A4B74D9642AD195C7CDB3B2D4250EAC82E3C8AFC77EE2B34E3CBCBCE00329291E949BCA
SSDEEP 768:RgXbDxhA6YcALvqSMq9Ww9kT1DAR729GPNwiZ6aU:iULvKAWDES9IlZ6aU
IMP 7F2FE7206F5F5230B9C430B1AC09802A
PESHA1 8A476E6AAB53F6A320AE3396F451E285D96309AC
PE256 E25E478B0FAE4C5E7334C6FFA86C1720EADE5FB16A0EE49552177C2B91D174A4

DLL Exports:

Function Name Ordinal Type
RfxVmtRegisterForVmTerminatedNotification 15 Exported Function
RfxVmtReleaseSharedBuffer 16 Exported Function
RfxVmtReadChannelAndCache 14 Exported Function
RfxVmtPauseLibrary 12 Exported Function
RfxVmtReadChannel 13 Exported Function
RfxVmtVWriteChannel 20 Exported Function
RfxVmtWriteChannel 21 Exported Function
RfxVmtShareBuffer 19 Exported Function
RfxVmtResumeLibrary 17 Exported Function
RfxVmtRevokeSharedBuffer 18 Exported Function
RfxVmtIsWriteDataConsumed 11 Exported Function
RfxVmtCreateChannel 4 Exported Function
RfxVmtCreateChannelCancelable 5 Exported Function
RfxVmtCloseChannel 3 Exported Function
RfxVmtAcquireSharedBuffer 1 Exported Function
RfxVmtCancelCreateChannel 2 Exported Function
RfxVmtGetDataAvailableEvent 9 Exported Function
RfxVmtGetVramDescriptor 10 Exported Function
RfxVmtGetChannelStatus 8 Exported Function
RfxVmtDisableLibrary 6 Exported Function
RfxVmtEnableLibrary 7 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000023241FB59996DCC4DFF000000000232
  • Thumbprint: FF82BC38E1DA5E596DF374C53E3617F7EDA36B06
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: rfxvmt.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/9dbe260e03ced0b4cd16f35dee14bd04463ca7b6e7127aa785f93a61330e4a2e/detection/

MIT License. Copyright (c) 2020-2021 Strontic.