d3dcompiler_47.dll

Direct3D HLSL Compiler for Redistribution file version info

Library on Windows 9 known copies with hashes

Is it the real d3dcompiler_47.dll?

file version info and known copies

Installed inC:\Program Files (x86)\Cisco Systems\Cisco Jabber\
C:\Program Files (x86)\Microsoft\Edge\Application\85.0.564.68\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\

Signed byMicrosoft Corporation

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionDirect3D HLSL Compiler for Redistribution

9 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\D3DCompiler_47.dll · signed by Microsoft Windows

0c359da9194f782a10acfd776131ae261bf8ac8508f11072597c983199267197

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Redist\D3D\x86\d3dcompiler_47.dll · signed by Microsoft Corporation

2630f4188bd2ea5451ca61d83869bf7068a4f0440401c949a9feb9fb476e15df

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\d3dcompiler_47.dll · signed by Microsoft Corporation

3ed3e811dc97adc89cd0d00da84b1b7ce220fed159a04926c32323c5f8f06044

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Redist\D3D\x64\d3dcompiler_47.dll · signed by Microsoft Corporation

44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\D3DCompiler_47.dll · signed by Microsoft Windows

784f78ff8f96d6c2d39d58b03f6dccaeb481aa1c72f2acd8dbc850e9b5e3deb7

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\d3dcompiler_47.dll · signed by Microsoft Corporation

e93f3c4bcc6dbaffa91d739ac4a941edbc616e00ae18b19e480ca2d382986c56

10.0.17763.132 (WinBuild.160101.0800) · C:\Program Files\Wireshark\d3dcompiler_47.dll · signed by Wireshark Foundation

ea0711e3469de8ba0217984145f67c77253c0dde52f5c7ded695191171e41e1e

10.0.17134.12 (WinBuild.160101.0800) · C:\Program Files (x86)\Cisco Systems\Cisco Jabber\d3dcompiler_47.dll · signed by Microsoft Corporation

8bf0eeb5081d8397e2f84f69449c8a80d9c0cdcf82bcef7a484309046adcb081

10.0.17134.12 (WinBuild.160101.0800) · C:\Program Files (x86)\Microsoft\Edge\Application\85.0.564.68\d3dcompiler_47.dll · signed by Microsoft Corporation

cb06276aa8832f3c5807f742d684e0e2ca1cb42234458c276578b716d3057580

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.