CloudNotifications.exe
Cloud notifications file version info
Program on Windows 10 known copies with hashes
Is it the real CloudNotifications.exe?
C:\Windows\system32\C:\Windows\SysWOW64\10 known copies
10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\CloudNotifications.exe · signed by Microsoft Windows
574257f2ab4dc9fb7fd62ad21fd3f011e03666099f55670363f7c83b9e099fc610.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\CloudNotifications.exe · signed by Microsoft Windows
fcc874f33b916cfb3de884a94f8a994b16d30fb4e8952240d6e12fab87e780df10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\CloudNotifications.exe · signed by Microsoft Windows
479abb3c7eee7d94a18ca41acb4429f196cf5668a5d9bc20278a930be3e8f1ff10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\CloudNotifications.exe · signed by Microsoft Windows
529392e4c55dc4c82ad9245b30f8ad8fa10564313462674d401e5ad9a142eeb510.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\CloudNotifications.exe · signed by Microsoft Windows
96e7e1a3f0f4f6fc6bda3527ab8a739d6dfcab8e534aa7a02b023daebb3c077510.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\CloudNotifications.exe · signed by Microsoft Windows
f14079b36f180ab59f02827222cdcc4948fac197c223ec3b732667abf99d7f9110.0.18362.815 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\CloudNotifications.exe · signed by Microsoft Windows
653ce2b47558fa9ebd52f971af253f3d656626944f77dfc4283f695206a2dc0510.0.18362.815 (WinBuild.160101.0800) · C:\WINDOWS\system32\CloudNotifications.exe · signed by Microsoft Windows
6eb2efc44d62b07fc2380dc1046c92f0bd4a28b7c10fae05f872a31570f2832010.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\CloudNotifications.exe · signed by Microsoft Windows
241d16c3f6e99691107df7f17cbc08c56bd84c163222daa051979dccb95d8cf710.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\CloudNotifications.exe · signed by Microsoft Windows
eb823693c4281fd34d871297c4088b1e5e5b4a24a1b02c73977f2983041e13c9From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.