CmdID

CmdID / Files

MusNotification.exe

MusNotificationBroker file version info

Program on Windows 8 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real MusNotification.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMusNotificationBroker

8 known copies

10.0.22000.37 (WinBuild.160101.0800) · C:\WINDOWS\system32\MusNotification.exe · signed by Microsoft Windows

01627340404bc7c933d2219b4d147b38777e69b4a75dbb92905b7581bcd7121b

10.0.19041.610 (WinBuild.160101.0800) · C:\Windows\system32\MusNotification.exe · signed by Microsoft Windows

e7e463b3f6c4eb898c1068b1d8baf23cea586115fb70846978cd513c017ecf64

10.0.19041.508 (WinBuild.160101.0800) · C:\Windows\system32\MusNotification.exe · signed by Microsoft Windows

043bb8c4bc3a3dd6713717b62d13bde5812d02af0b15ff2248f670418b012d4e

10.0.19041.292 (WinBuild.160101.0800) · C:\Windows\system32\MusNotification.exe · signed by Microsoft Windows

1ed725825f3bc7e71af77d8b79d721a574227d91cc89cd80b9765cc8088cb8dd

10.0.19041.1320 (WinBuild.160101.0800) · C:\Windows\system32\MusNotification.exe · signed by Microsoft Windows

fcd5feea9d8ead8c0ebbf0895d35ee8f2557c611ce9ea098d8fdbfbc93358f90

10.0.18362.836 (WinBuild.160101.0800) · C:\WINDOWS\system32\MusNotification.exe · signed by Microsoft Windows

20a3dcc3e1215842ef67b39afe5dc449e0f3d2002d47dc82e3c3da88ecea84cb

10.0.17763.1192 (WinBuild.160101.0800) · C:\Windows\system32\MusNotification.exe · signed by Microsoft Windows

6473e672f264c10b4f5853cb5ba8fabf5f4a9355341a8c162f42a58d00777b49

10.0.14393.3564 (rs1_release.200303-1942) · C:\Windows\system32\MusNotification.exe · signed by Microsoft Windows

2575ff4d7f8398ed8e3fb13e1f3134016097316500516c6b63270fdce3c4a79d

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.