home

NotificationUI.EXE

Notification UI Implementation

Microsoft Corporation

It runs as a scheduled task under the Windows Task Scheduler. It is installed as part of Windows 8.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® Windows® Operating System

Description:
Notification UI Implementation

 
Part of the Windows 8 Operating System

Version:
6.2.9200.16686 (win8_gdr.130809-1506)

MD5:
7f4a8d54d802a81913bd44bfb1ea728c

SHA-1:
b8c8e30cd20601a8f60637cfd155cf9fca839f66

SHA-256:
e7e5d1b1997d73045c0866a070a1dc67f25cb724b4498beb6b78390685e59990

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
5/15/2024 7:13:18 AM UTC  (today)

File size:
195.2 KB (199,872 bytes)

Product version:
6.2.9200.16686

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
NotificationUI.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Windows\System32\notificationui.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
6/17/2013 2:43:38 PM

Valid to:
9/17/2014 2:43:38 PM

Subject:
CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000002418FC0B689E7399D0000000000024

File PE Metadata
Compilation timestamp:
8/9/2013 6:56:15 PM

OS version:
6.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
3072:vxt7vOP3loD2klmSEwGinJVF6EtI2124VT/YMgy+dgWh/qIaUShVQQKLS8rSu1GT:nD22mSa5az+q

Entry address:
0x8B2F

Entry point:
E8, 5E, 04, 00, 00, E9, 0B, FE, FF, FF, CC, CC, CC, CC, CC, 3B, 0D, 0C, B0, 40, 00, 75, 03, C2, 00, 00, E9, 05, 00, 00, 00, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 81, EC, 24, 03, 00, 00, A3, 40, B1, 40, 00, 89, 0D, 3C, B1, 40, 00, 89, 15, 38, B1, 40, 00, 89, 1D, 34, B1, 40, 00, 89, 35, 30, B1, 40, 00, 89, 3D, 2C, B1, 40, 00, 66, 8C, 15, 58, B1, 40, 00, 66, 8C, 0D, 4C, B1, 40, 00, 66, 8C, 1D, 28, B1, 40, 00, 66, 8C, 05, 24, B1, 40, 00, 66, 8C, 25, 20, B1, 40, 00, 66, 8C, 2D, 1C, B1, 40, 00, 9C, 8F, 05, 50...
 
[+]

Entropy:
5.0854

Code size:
33 KB (33,792 bytes)

2 Scheduled Tasks
Task name:
Windows Upgrade Notification Task

Path:
\Microsoft\Windows\Setup\Windows Upgrade Notification Task

Trigger:
Logon (Runs on logon)

Action:
notificationui.exe \shownotification

Task name:
Pre-staged GDR Notification

Path:
\Microsoft\Windows\Setup\Pre-staged GDR Notification

Trigger:
Weekly (Runs weekly on Mondays at 8:00 PM)

Action:
notificationui.exe \applicability


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.