CmdID

CmdID / Files

FsIso.exe

Secure Frame Server Helper file version info

Program on Windows 6 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real FsIso.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionSecure Frame Server Helper

6 known copies

10.0.22000.65 (WinBuild.160101.0800) · C:\WINDOWS\system32\FsIso.exe · signed by Microsoft Windows

f083df127e9c51bf546182ce36bced63a535c908373e15e9b108d187c7783981

10.0.19041.662 (WinBuild.160101.0800) · C:\Windows\system32\FsIso.exe · signed by Microsoft Windows

a20162cdcbdef6198f706aced860ecc93096aeccea1acc959e3ff51132bf62e7

10.0.19041.329 (WinBuild.160101.0800) · C:\Windows\system32\FsIso.exe · signed by Microsoft Windows

ff419466845f99a7e5aac084150bbd4c0a2a4aaaef2118f8afa41716b8790e88

10.0.19041.1266 (WinBuild.160101.0800) · C:\Windows\system32\FsIso.exe · signed by Microsoft Windows

a5244df09bd9037d7b8a144bf3e3be43e9e41dbfe50e11014a211a8a0e3165ea

10.0.18362.628 (WinBuild.160101.0800) · C:\WINDOWS\system32\FsIso.exe · signed by Microsoft Windows

0efe9f2741e79ce42776c8c268377082a8f6455bc0e4315f7ca96f632d1bbfe0

10.0.17763.1282 (WinBuild.160101.0800) · C:\Windows\system32\FsIso.exe · signed by Microsoft Windows

a0dd2217d4b652179805015f9afd3698adfa2e178adde8af0931a6861fc88ff8

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.