CmdID / Files

MCRecvSrc.dll

Miracast Media Foundation Source DLL file version info

Library on Windows 2 known copies with hashes

Is it the real MCRecvSrc.dll?

file version info and known copies

Installed inC:\Windows\system32\
C:\Windows\SysWOW64\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionMiracast Media Foundation Source DLL

2 known copies

10.0.19041.153 (WinBuild.160101.0800) · C:\Windows\system32\MCRecvSrc.dll · signed by Microsoft Windows

6e498c4ed231d53ef8941c37234fd5c6b89e0d662851584d88a38bf758aaa31c

10.0.19041.153 (WinBuild.160101.0800) · C:\Windows\SysWOW64\MCRecvSrc.dll · signed by Microsoft Windows

7ac92e18903f595ecef2b557230bfbff778d85e145b7f57ac0deb5085c105f8d

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.