SynTPHelper.exe
Synaptics Pointing Device Helper file version info
Program on Windows 3 known copies with hashes
Is it the real SynTPHelper.exe?
C:\WINDOWS\system32\DriverStore\FileRepository\synpd.inf_amd64_318aa16b062fddc3\C:\WINDOWS\system32\DriverStore\FileRepository\synpd.inf_amd64_4e500223b4e4a9e4\C:\WINDOWS\system32\DriverStore\FileRepository\synpd.inf_amd64_b28b907efbdd0634\3 known copies
19.3.31.31 16Aug17 · C:\WINDOWS\system32\DriverStore\FileRepository\synpd.inf_amd64_318aa16b062fddc3\SynTPHelper.exe · signed by Microsoft Windows Hardware Compatibility Publisher
eb3014ba5b024027659851d27e0c37f2dfa4a67531dc1ee6dc21a1d27ea2223219.0.12.95 06Jul15 · C:\WINDOWS\system32\DriverStore\FileRepository\synpd.inf_amd64_4e500223b4e4a9e4\SynTPHelper.exe · signed by Microsoft Windows Hardware Compatibility Publisher
bba761488e37d2439007c7580c0c39f5ca1d72649a5f74424c3902e3467b5c0415.3.29 13Oct11 · C:\WINDOWS\system32\DriverStore\FileRepository\synpd.inf_amd64_b28b907efbdd0634\SynTPHelper.exe · signed by Microsoft Windows Hardware Compatibility Publisher
227196bab2d7d14fb64284159b0eafb4663c2f0ed3df3de96c8970749524ccffFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.