CmdID

CmdID / Files

Windows.Media.BackgroundPlayback.exe

Windows Media Playback EXE file version info

Program on Windows 10 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real Windows.Media.BackgroundPlayback.exe?

file version info and known copies
Original nameWindows.Media.Playback.exe in the file’s header: a renamed copy still carries it
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionWindows Media Playback EXE

10 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\Windows.Media.BackgroundPlayback.exe · signed by Microsoft Windows

00963c2314a735407620faf8f939739c80e043a0a383a721f2eacf9c9081f511

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\Windows.Media.BackgroundPlayback.exe · signed by Microsoft Windows

0db5d80e7c80ac439b4dceba4f79fc37516cbcb74876f26b3ba63e1a37ed49bf

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\Windows.Media.BackgroundPlayback.exe · signed by Microsoft Windows

3b7ca2a56a36a3b767461c17d77f188a0308164d3e80ad39d17c13683346ca9b

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\Windows.Media.BackgroundPlayback.exe · signed by Microsoft Windows

f1675aec9be46208fbafa4d6bb389f61c89b1f6059e15ca1c4390eba9f7c03ac

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\Windows.Media.BackgroundPlayback.exe · signed by Microsoft Windows

03f567d8757bda1ca0e794e1731cfe9064ae67f6188555eb7fcb58327092dfb0

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\Windows.Media.BackgroundPlayback.exe · signed by Microsoft Windows

65d32aea8b3687ec73ac4f18457fa962e1fa42f73be76176b6099ea902aa73f2

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\Windows.Media.BackgroundPlayback.exe · signed by Microsoft Windows

3702851830630fa50aeac479253b244781143c7e1419e4fb5014ae8963ec457a

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\Windows.Media.BackgroundPlayback.exe · signed by Microsoft Windows

fa7da9587f07d847c492d371cfe18cce09c54b49a1cbf05efbb569b75939751f

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\Windows.Media.BackgroundPlayback.exe · signed by Microsoft Windows

3d8ecbf374674ac3d08b4fcad1efe393c82b837d90a84c8431dada73323e6804

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\Windows.Media.BackgroundPlayback.exe · signed by Microsoft Windows

cb47ce040097b4af191c6836a339d9f56df4a0c369da24a0a6092401e1a4db81

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.