CmdID

CmdID / Files

Windows.Mirage.dll

Windows Perception API file version info

Library on Windows 2 known copies with hashes

Is it the real Windows.Mirage.dll?

file version info and known copies
Original nameMirage in the file’s header: a renamed copy still carries it
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionWindows Perception API

2 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\Windows.Mirage.dll · signed by Microsoft Windows

SHA-2564d276370a0799076dc5df32d4bd349848964f6c09bebc824d73b0a7501b72021SHA-1c21e11efc58a96b5290c6816d22a3b28fc97903eMD5abaf65373b5eddb3f388e1e21b9e163b

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\Windows.Mirage.dll · signed by Microsoft Windows

SHA-256a3b2d5ae24acd595b8ba67a33b1aa9f4fb76fa7d645689589cc7382f8df2d0d9SHA-163484be9df1b11f006a3ddc8f883c2d901be018aMD576bb56278b89fbc10687de3afa4eaafa

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<hash>".whatis() says which known copy an MD5, SHA-1 or SHA-256 is.