CmdID

CmdID / Files

LocationNotificationWindows.exe

Location Notification file version info

Program on Windows 5 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real LocationNotificationWindows.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionLocation Notification

5 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\LocationNotificationWindows.exe · signed by Microsoft Windows

ee8b4c66a76127ff92298c468aac26de95344d80ec3be1616a6f8c97ca5d6229

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\LocationNotificationWindows.exe · signed by Microsoft Windows

a9024c4c0ed03730085fb529828a917f701e3dca30d3286ae0d41e9fff33f445

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\LocationNotificationWindows.exe · signed by Microsoft Windows

30c0e03d3917242d5260a048883fc0e80d81ad926e6834bbd55f834ae7045709

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\LocationNotificationWindows.exe · signed by Microsoft Windows

4fb18811fed500a9d1e24f14c158ccd7095d5777d2f2f8247982d14119dbc8dd

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\LocationNotificationWindows.exe · signed by Microsoft Windows

52a028416fbe7ff2ff1936cffdc59082a1ebbb7e100bfbfc0e7e79e89e983bcd

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.