CmdID

CmdID / Files

InstNT.exe

TouchPad Driver Installation Application file version info

Program on Windows 3 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real InstNT.exe?

file version info and known copies
Installed inC:\WINDOWS\system32\DriverStore\FileRepository\synpd.inf_amd64_318aa16b062fddc3\
C:\WINDOWS\system32\DriverStore\FileRepository\synpd.inf_amd64_4e500223b4e4a9e4\
C:\WINDOWS\system32\DriverStore\FileRepository\synpd.inf_amd64_b28b907efbdd0634\
Signed byMicrosoft Windows Hardware Compatibility Publisher
ProductSynaptics Pointing Device Driver, Synaptics Incorporated
DescriptionTouchPad Driver Installation Application

3 known copies

19.3.31.31 16Aug17 · C:\WINDOWS\system32\DriverStore\FileRepository\synpd.inf_amd64_318aa16b062fddc3\InstNT.exe · signed by Microsoft Windows Hardware Compatibility Publisher

ccfd6656c99567eee2bca40847e70e597a845b267b4bb434b02f883dfc0792bb

19.0.12.95 06Jul15 · C:\WINDOWS\system32\DriverStore\FileRepository\synpd.inf_amd64_4e500223b4e4a9e4\InstNT.exe · signed by Microsoft Windows Hardware Compatibility Publisher

8dfb712590b20d8d1edb7178e71ec9a5be4ea6004a5ff108678ec91c0ec95d2b

15.3.29 13Oct11 · C:\WINDOWS\system32\DriverStore\FileRepository\synpd.inf_amd64_b28b907efbdd0634\InstNT.exe · signed by Microsoft Windows Hardware Compatibility Publisher

017a9efada1757e4718008b05b3230ab608b02306ec86a6a43b86d2057513d6b

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.