vmbuspipe.dll

  • File Path: C:\Windows\system32\vmbuspipe.dll
  • Description: VmBus User Mode Pipe DLL

Hashes

Type Hash
MD5 8A1F3DD3A28B62699EBA45271A7397EA
SHA1 DC70B68C95E082FC8D0F528A9880B4701BE00A6E
SHA256 9E169DF741561F77F9AE595FF24B373B4696273DE2B7AB4F2903A5D3A00A6DE4
SHA384 A6C7463A414A43716022F3C4A296C1636CE847057788E39D9ED7EC3F0DD22FC9AD0871ACDDB6A8DABA28C3383A5BAAD8
SHA512 CA77FBE368EA28B900A6055828718C676C33B256876BEE631EBDA48932F7ADF3A3E75E6FAAB5804C3E8D4A0BFBD34DE008224B04DD1ACFEDA092D138C73FBC3D
SSDEEP 384:pHEQr7gY1lHYaokO6bXTVl61cOpTDIWZaW1+8hDBRJn/eNEXwuAzXulGswUl:pp7gMlrtXkTj5Lh1Pn/eNPzr
IMP A173BB6AA7B80A12B3B557BD3B1887D8
PESHA1 A5A16E189A4222D85D5136BBA204B2F85635C94D
PE256 C71DFA5BD6B142F850C506C8F2C08643A59EB3CEBCAE16E61C3D2EF361DA7FC6

DLL Exports:

Function Name Ordinal Type
VmbusPipeClientWaitChannel 7 Exported Function
VmbusPipeClientUnregisterChannelNotification 6 Exported Function
VmbusPipeServerConnectPipe 8 Exported Function
VmbusPipeServerOfferChannelEx 10 Exported Function
VmbusPipeServerOfferChannel 9 Exported Function
VmbusPipeClientOpenChannel 2 Exported Function
VmbusPipeClientEnumeratePipes 1 Exported Function
VmbusPipeClientOpenChannelEx 3 Exported Function
VmbusPipeClientRegisterChannelNotification 5 Exported Function
VmbusPipeClientReadyForChannelNotification 4 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: vmbuspipe.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.488 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.488
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/61
  • VirusTotal Link: https://www.virustotal.com/gui/file/9e169df741561f77f9ae595ff24b373b4696273de2b7ab4f2903a5d3a00a6de4/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\system32\DriverStore\FileRepository\wvmbus.inf_amd64_a8256b0fba59b299\vmbuspipe.dll 100
C:\Windows\system32\hal.dll 44

MIT License. Copyright (c) 2020-2021 Strontic.