facefoduninstaller.exe
Summary
Windows Face Recognition Feature-On-Demand Uninstaller - removes Windows Hello face recognition components.
facefoduninstaller.exe is the 730th most commonly executed Windows program in EchoTrail's dataset, observed 4,733 times across enterprise environments. It typically runs from C:\Windows\System32\WinBioPlugIns and it is most often launched by svchost.exe.
Behavior
Top Paths
- C:\Windows\System32\WinBioPlugIns100%
Top Hashes (SHA256)
- 72201f9d6d82e5e1d4bd1f696ba05a6ead8111f398acc36554a999c08a08342616.19%
- 64d3d378c351099f70b371091780fa193b1580e9b11ef4c3f7b5d8f7f426071415.58%
- 963eb37bbda94584ac435c585b90d04c4d04ca5bbbd1ea6527dbf1e6181d6db314.31%
- e908686bbf40acfe9fb0a8aff3c686d6facbf9c57f21622398cbdca48eb8403c10.66%
- 6e369db1dbf7d749c9e88e730bea34ee06b53d2d35b958e1d038525cffbec52b9.38%
- 589d7c22d617884b5e4c19cf0435f26c37109b77f3d2f609bac18a9b49feac818.67%
- 8e49b01aa269866e471090b95ed9c2aa009df768ff3b9463ff732bcd775d144f5.82%
- 9e370fedbdcbd4645683566bd48dba0d4fbc009db7e661e6a6515d174faa8aed3.43%
- 94042b487f4c3216329376514449b6559903300f45649011b7b3a4f6e1ace0332.83%
- a470380040727809387bf55db7677ed6b2671fdc77f79161a78316dbe608af252.54%
Process Ancestry
Top Grandparents
- services.exe90.16%
- winlogon.exe0.78%
Top Parents
- svchost.exe97.36%
- LogonUI.exe1.84%
- cmd.exe0.8%
Top Children
- cmd.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about facefoduninstaller.exe
Rocky answers questions about facefoduninstaller.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.