CmdID

CmdID / Files

uninstall.exe

Mozilla Maintenance Service Installer file version info

Program on Windows 29 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real uninstall.exe?

file version info and known copies
Original namemaintenanceservice_installer.exe in the file’s header: a renamed copy still carries it
Installed inC:\Program Files (x86)\Mozilla Maintenance Service\
C:\Program Files (x86)\TeamViewer\
C:\Program Files (x86)\AIMP3\
Signed byTeamViewer Germany GmbH
ProductThunderbird, Mozilla Corporation
DescriptionMozilla Maintenance Service Installer

29 known copies

91.3.0 · C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe · not signed

71c82d36f4bd04d742f28ed4bd689da95614cabe6b0693dc12bed37a4689520b

78.2.2 · C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe · not signed

b58ad33969a8d3b0ae3b338e98545671a15da4d0344b6d37873ff02068a408e7

78.2.0 · C:\program files (x86)\Mozilla Maintenance Service\Uninstall.exe · not signed

21d695a10e5a4807be7ac9a1c3af48e6ae511da10d985baf025da51dd99a4b10

78.1.1 · C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe · not signed

0c1f7e9c6e8b42f73b7f47ab3ff70013795b2b07974525f41ca2fd1aa0f35122

19.00 · C:\Program Files\7-Zip\Uninstall.exe · not signed

24a2472e3bd5016cb22ce14cefee112d5bc18354bf099e8e66ad9846aea15088

8.1.9.0 · C:\Program Files (x86)\Notepad++\uninstall.exe · not signed

1435076b29fea1eda03158a79fe7d90b9611dbf99b6cbc539f7ad1fa0c1aa80d

7.8.9.0 · C:\Program Files (x86)\Notepad++\uninstall.exe · not signed

43bf4010b7b762b088dd6eaae3858182d975c8bf3e3bae6e501b35747c2a3dda

4.70.2227.0 · C:\Program Files (x86)\AIMP3\Uninstall.exe · signed by IP Izmaylov Artem Andreevich

5d2c0fd1a7d55905ee68f5d8944f45577057d01a95ed66c3de0c57487bb170c6

4.70.2224.0 · C:\program files (x86)\AIMP3\Uninstall.exe · signed by IP Izmaylov Artem Andreevich

fe9a3158929add8735e5dce5bd81ab76873b472d5e22f362b1c3442387ddf46d

4.3.0.0 · C:\Program Files\Krita (x64)\uninstall.exe · not signed

b99bb630b5e7438355565cec976ac2845bbb87910db75f3918a2e11bdbdc06cd

4.0.1.2 · C:\Program Files (x86)\SugarSync\uninstall.exe · not signed

b874011e659268bb0701c503ba61e2f1a8909d0a31b6f8219aa3623973fb0629

3.50.0 · C:\Program Files\FileZilla FTP Client\uninstall.exe · not signed

92eadcb23526d090167d63cea53531f5506a69c581786c8dbd7e822e538e6f84

3.49.1 · C:\Program Files\FileZilla FTP Client\uninstall.exe · not signed

c30c7251a142159702163c474068d109519f8ae2d56ca9f73227d69000f61792

3.2.7.0 · C:\Program Files\Wireshark\uninstall.exe · signed by Wireshark Foundation

3f7d564e013f3a2b7eb9cd5088210a6c2a744f42c440936007ab0f160be79ea5

2.10.91.91 · C:\Program Files (x86)\Steam\uninstall.exe · signed by Valve

8f648df6a34445236155b2094905d1fb142e3f9cc314781c4361cf3c052e77f6

2.5.8.0 · C:\Program Files (x86)\ImgBurn\uninstall.exe · not signed

1b5cb8035b18d06b5219f2e7d30200ca343c0ce6763962c7c41534aecc2b1c80

2.3 · C:\Program Files (x86)\GRETECH\GomPlayer\Uninstall.exe · not signed

3feb94195fd6f271a412b63611fc18da8eecc222ad35ce7bc36f081579900eea

1.6 · C:\Program Files (x86)\foobar2000\uninstall.exe · not signed

485208ea7d441ceac4943fb08d012faa0a5f0b57b785b4879cbe944fcf6fb98e

1.5.5 · C:\program files (x86)\foobar2000\uninstall.exe · not signed

d2b461b69fc495718c6cbba8fdd1007f79c176fdf1baeee70a7ce4d6b13aa1df

1.4.1.992 · C:\Program Files\Everything\Uninstall.exe · not signed

6084c10731e5150b99898eb0fcd5b36bd06ac07e93b01d826895cb5416b282c1

1.4.1.988 · C:\program files\Everything\Uninstall.exe · not signed

2069a7e66bca6274e1119257c17cffdc4e5ea2bf5df1e0397f4eb9e2aa8e59c1

1.1.2 · C:\Program Files (x86)\WinDirStat\Uninstall.exe · not signed

afc864cfce79b2a6add491a27ea672d958233ed7a97a2cbbce60100d2fa1e670

Version not recorded · C:\Program Files (x86)\NVDA\uninstall.exe · signed by NV Access Limited

0b8d1b0c541560feabaa846a095e6e0213960a1a83e28cef6ed03478bbf1d32b

Version not recorded · C:\Program Files (x86)\TeamViewer\uninstall.exe · signed by TeamViewer Germany GmbH

3561852da0901a2ec0865eda7314e679b9bc01eb504c2223f2cbc234618dd53b

Version not recorded · C:\Program Files (x86)\NVDA\uninstall.exe · signed by NV Access Limited

6842976eeb996fc807f87c6a6c94c753af00c508b9470e3923e9eb0ddc2093c6

Version not recorded · C:\Program Files (x86)\MusicBee\Uninstall.exe · not signed

7d036be30ef5e21750ada057a8392d6e80caee23b30f6c6bd982671c529c7d2f

Version not recorded · C:\Program Files\VideoLAN\VLC\uninstall.exe · not signed

8e98238fd2b28836f2d5b50d25d7b704b62cbf697db08bc42543f3e5870006a4

Version not recorded · C:\Program Files (x86)\TeamViewer\uninstall.exe · signed by TeamViewer Germany GmbH

9d8cf05d7466d89efa982e0f101096a86764993f746bafc20c8fb58800f5feaa

Version not recorded · C:\program files (x86)\TeamViewer\uninstall.exe · signed by TeamViewer Germany GmbH

e168f3aa8eb17a005b19dd143652a6079c19ee14f5b9a4f9c1da4195fd976e78

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.