SynTPEnhService.exe
64-bit Synaptics Pointing Enhance Service file version info
Program on Windows 2 known copies with hashes
Is it the real SynTPEnhService.exe?
C:\WINDOWS\system32\DriverStore\FileRepository\synpd.inf_amd64_318aa16b062fddc3\C:\WINDOWS\system32\DriverStore\FileRepository\synpd.inf_amd64_4e500223b4e4a9e4\2 known copies
19.3.31.31 16Aug17 · C:\WINDOWS\system32\DriverStore\FileRepository\synpd.inf_amd64_318aa16b062fddc3\SynTPEnhService.exe · signed by Microsoft Windows Hardware Compatibility Publisher
396b4e67bca7bc4b853940af98406ef72135f536882385a6ec1960fa0c4fc42f19.0.12.95 06Jul15 · C:\WINDOWS\system32\DriverStore\FileRepository\synpd.inf_amd64_4e500223b4e4a9e4\SynTPEnhService.exe · signed by Microsoft Windows Hardware Compatibility Publisher
444ec43083a20af3a243ff5a68a038271b01565ff4bb95f7c54189a23780e1a0From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.