CmdID

CmdID / Files

UpdateNotificationMgr.exe

Update Notification Pipeline Manager file version info

Program on Windows 4 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real UpdateNotificationMgr.exe?

file version info and known copies
Installed inC:\Windows\system32\UNP\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionUpdate Notification Pipeline Manager

4 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\UNP\UpdateNotificationMgr.exe · signed by Microsoft Windows

976ff9ab6eaa7a8d5cabcce2828eba0a4f458c0b5c719d9acf6decdae4a571a8

10.0.19041.264 (WinBuild.160101.0800) · C:\Windows\system32\UNP\UpdateNotificationMgr.exe · signed by Microsoft Windows

5fe4952bcf8ac7edf0c7c6342f674aff558d47d7902c8217d73069ae084f3f9b

10.0.19041.1266 (WinBuild.160101.0800) · C:\Windows\system32\UNP\UpdateNotificationMgr.exe · signed by Microsoft Windows

e98effdbb13ee8e4f9c5dadec4c07b9b5f90c17f546cbd94bedfed104df89d72

10.0.18362.592 (WinBuild.160101.0800) · C:\WINDOWS\system32\UNP\UpdateNotificationMgr.exe · signed by Microsoft Windows

11781cf9a807bdf44bc0b0e2d31ebccbea16f7dbf87753d5e107e93fad91f48d

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.