CmdID

CmdID / Files

FaceFodUninstaller.exe

Program on Windows 5 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real FaceFodUninstaller.exe?

file version info and known copies
Installed inC:\Windows\system32\WinBioPlugIns\
Signed byMicrosoft Windows

5 known copies

Version not recorded · C:\Windows\system32\WinBioPlugIns\FaceFodUninstaller.exe · signed by Microsoft Windows

589d7c22d617884b5e4c19cf0435f26c37109b77f3d2f609bac18a9b49feac81

Version not recorded · C:\WINDOWS\system32\WinBioPlugIns\FaceFodUninstaller.exe · signed by Microsoft Windows

72201f9d6d82e5e1d4bd1f696ba05a6ead8111f398acc36554a999c08a083426

Version not recorded · C:\WINDOWS\system32\WinBioPlugIns\FaceFodUninstaller.exe · signed by Microsoft Windows

85a94f70f89a141ae60e5c6e96f43ac47f313e77a3de3b3146cfab8e04c9c739

Version not recorded · C:\Windows\system32\WinBioPlugIns\FaceFodUninstaller.exe · signed by Microsoft Windows

8e49b01aa269866e471090b95ed9c2aa009df768ff3b9463ff732bcd775d144f

Version not recorded · C:\Windows\system32\WinBioPlugIns\FaceFodUninstaller.exe · signed by Microsoft Windows

94042b487f4c3216329376514449b6559903300f45649011b7b3a4f6e1ace033

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.