CmdID

CmdID / Files

CastSrv.exe

Casting protocol connection listener file version info

Program on Windows 6 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real CastSrv.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionCasting protocol connection listener

6 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\CastSrv.exe · signed by Microsoft Windows

a53e3cd8ab07cc160fbc4881b1f5ee80705b7439243cd80aa431660b8188ef2a

10.0.19041.746 (WinBuild.160101.0800) · C:\Windows\system32\CastSrv.exe · signed by Microsoft Windows

d3254833f27c07aba89adf18df3d01baeec74d0983edf5b6045cadaa0e7d2419

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\CastSrv.exe · signed by Microsoft Windows

a0dc0eff268756b16541dd36ab8acaf3979a240c474d9cd19ccba1ecfd263998

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\CastSrv.exe · signed by Microsoft Windows

e8ef7c4a686f4e186cba0617c657e7c0a977005af8145201483d6eee64cb7cc4

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\CastSrv.exe · signed by Microsoft Windows

3eacc4101f8d7e0360cfb1be38cf46fb3a6901fcb89dbcf45a0806c751219a73

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\CastSrv.exe · signed by Microsoft Windows

260b608ec4c2e43a78c5585b97aefce1a34429a6fa85ce6e152719344edf896d

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.