CmdID

CmdID / Files

WMPDMC.exe

Cast to Device file version info

Program on Windows 7 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real WMPDMC.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionCast to Device

7 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\WMPDMC.exe · signed by Microsoft Windows

aa5600088344973c4167ee6eae70f6f74c2572956e1246644ed936eb50165ee1

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\WMPDMC.exe · signed by Microsoft Windows

c36eba7186f7367fe717595f3372a49503c9613893c2ab2eff38b625a50d04ba

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\WMPDMC.exe · signed by Microsoft Windows

d7581b8c82faf97b9b2049f031d29aae593aaeb3da805f5af14944c0129622eb

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\WMPDMC.exe · signed by Microsoft Windows

b70483d029b4a563e1c9980208dd76a89bcbcbe5bd2a83c24919522196d7bd39

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\WMPDMC.exe · signed by Microsoft Windows

fe6a7c6e23ff1ea7d297aeb0d2b4c5e6e39db31764a3afec31b4ca3f385e3fc8

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\WMPDMC.exe · signed by Microsoft Windows

ac284812e17c0aa9963d2dad03a2891b3fd3dcccbb0b23d0d8c414f3369fcfce

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\WMPDMC.exe · signed by Microsoft Windows

b5cb160bee515c720802ecf33cedb883712f656b421f138f9c86df1ebc614e63

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.