CmdID

CmdID / Files

GameBarPresenceWriter.exe

Gamebar Presence Writer file version info

Program on Windows 10 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real GameBarPresenceWriter.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionGamebar Presence Writer

10 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\GameBarPresenceWriter.exe · signed by Microsoft Windows

d57c2ea49484c8b5d384d6ddd04f4d7b179671a6e2fb0a51f2e107a518d6aa5b

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\GameBarPresenceWriter.exe · signed by Microsoft Windows

e38daeb5a8b2df380d7c586b5b44534cbd98294ca6ecc4663e652c2bbee4e434

10.0.19041.1202 (WinBuild.160101.0800) · C:\Windows\system32\GameBarPresenceWriter.exe · signed by Microsoft Windows

3ecc7154b78472777ab5325525ae4bf394ed7aa1a9f00906d20ad973e27d2ed0

10.0.19041.1202 (WinBuild.160101.0800) · C:\Windows\SysWOW64\GameBarPresenceWriter.exe · signed by Microsoft Windows

f9cab3cc0a5d997bd303f836a8634076f10eb5f6a288cffece18c8add6c1a967

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\GameBarPresenceWriter.exe · signed by Microsoft Windows

767cc00af6f9f37e77d3365f2ee50a327166107341b159bf8a7c6b3c5259fd56

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\GameBarPresenceWriter.exe · signed by Microsoft Windows

d5816718026274f5bfd67ee85f6ec008c81c7069aa0e883caa3b01953c855d30

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\GameBarPresenceWriter.exe · signed by Microsoft Windows

4ee9d250485e383365fccf6ddec48a03d197f94c40fcf23e13deb4c226df4a79

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\GameBarPresenceWriter.exe · signed by Microsoft Windows

a91fe2c9166889af8e0d89aced1e7189ee997a7a86cb537706a424ecdc73abf8

10.0.14393.2608 (rs1_release.181024-1742) · C:\Windows\system32\GameBarPresenceWriter.exe · signed by Microsoft Windows

505280c8efe3f358f80ced74c1558a132ce85bf2337b0ccc09a47b2c9e9a7eec

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\GameBarPresenceWriter.exe · signed by Microsoft Windows

850efb0ba4a51a228b74ffa5e8fe0d5346bc63e061d656e27b29acaeb52bb42a

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.