CmdID

CmdID / Files

WinBioDataModelOOBE.exe

WinBioDataModel OOBE file version info

Program on Windows 7 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real WinBioDataModelOOBE.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionWinBioDataModel OOBE

7 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\WinBioDataModelOOBE.exe · signed by Microsoft Windows

4766323ac76de94852e50fd8a6f3795128704ca3949ae94b33ccdeaf68fe2542

10.0.19041.844 (WinBuild.160101.0800) · C:\Windows\system32\WinBioDataModelOOBE.exe · signed by Microsoft Windows

6c892bef1bc6b6141729b99bb02cc316809707d78b051024236e0a2f718d1fab

10.0.19041.423 (WinBuild.160101.0800) · C:\Windows\system32\WinBioDataModelOOBE.exe · signed by Microsoft Windows

0f8ff7b4506b083d87a2759d7959cbe8e8f7485d17dc40fa97327473fcaf113d

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\WinBioDataModelOOBE.exe · signed by Microsoft Windows

814d86340c5ec80b8cbc7e91956ff2db54107666130e2949b93264da972c82f9

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\WinBioDataModelOOBE.exe · signed by Microsoft Windows

35596ae87219a0839725b72f563163024f8d215d855dc6b799bfd7d0beed12ec

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\WinBioDataModelOOBE.exe · signed by Microsoft Windows

67247aa01f43e691febb1000da0df0ef50837bca39115f1c76e088f6e509952f

10.0.14393.3686 (rs1_release.200504-1524) · C:\Windows\system32\WinBioDataModelOOBE.exe · signed by Microsoft Windows

e3fa38ec4a79d53f0745177a2d301696d01afebcac23761fd37c0b69f46f5475

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.