CmdID

CmdID / Files

Fondue.exe

Windows Features on Demand UX file version info

Program on Windows 12 known copies with hashes Command fondue

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real Fondue.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionWindows Features on Demand UX

12 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\Fondue.exe · signed by Microsoft Windows

b28684090e0c877c71d0e37958bf0ee18fc4f6614a69b99c19e6ce90ea3b294c

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\Fondue.exe · signed by Microsoft Windows

e00c82610d6e9d2ba4837012833f514ca12914eefb6e5f8cf263b36b50ae7a3c

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\Fondue.exe · signed by Microsoft Windows

52319d1a4c727bac0a328383f4a571dec7b7b72ef6d50913e9212834983c5547

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\Fondue.exe · signed by Microsoft Windows

8f4758f2b671e901cfc743fb7f3bd7b63094d84d55b4d8f7eb0722ba1205a6d2

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\Fondue.exe · signed by Microsoft Windows

31bf2cf2fb4eac38c03dc388a99680a421b426a44c6a1e870fb40d1d2dc72458

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\Fondue.exe · signed by Microsoft Windows

837e26da67bbbad8675c7aef8e68a4f01425dbdcab02d35fc6cdfe99a7b36c88

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\Fondue.exe · signed by Microsoft Windows

ce88d88e233a9ab9b47bea00af705ecf49869be78e671bd09aa4f7d5a34c9953

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\Fondue.exe · signed by Microsoft Windows

e86b8997664e14fb6d0972d1e9d394a99afe9e877a7911cbe7a0e575ef04791e

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\Fondue.exe · signed by Microsoft Windows

29a612caa964ce61d8ffbc2951ec2c1a401ab775c1883782ad83fde8cfa19de6

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\Fondue.exe · signed by Microsoft Windows

933cbaf190163d0ddcbbd1e18eebd1d0583856e86e2802c6aa5e807856e6478c

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\Fondue.exe · not signed

852bffe953e3c9a19e9da3fd6fb97ac6365393afe090db9d044d54e315a9fe47

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\Fondue.exe · not signed

a7dd9378d44ce86ffebc0292f59ef096595043e6114011a0cfd9295f0a6cf7a2

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.