SynZMetr.exe
Synaptics Pressure Graph file version info
Program on Windows 3 known copies with hashes
Is it the real SynZMetr.exe?
Zmeter2.exe in the file’s header: a renamed copy still carries itC:\WINDOWS\system32\DriverStore\FileRepository\synpd.inf_amd64_318aa16b062fddc3\C:\WINDOWS\system32\DriverStore\FileRepository\synpd.inf_amd64_4e500223b4e4a9e4\C:\WINDOWS\system32\DriverStore\FileRepository\synpd.inf_amd64_b28b907efbdd0634\3 known copies
19.3.31.31 16Aug17 · C:\WINDOWS\system32\DriverStore\FileRepository\synpd.inf_amd64_318aa16b062fddc3\SynZMetr.exe · signed by Microsoft Windows Hardware Compatibility Publisher
e3ec22466529e7fa9fd7bd395208962ed23cda5118f8d17a8da765b65388077d19.0.12.95 06Jul15 · C:\WINDOWS\system32\DriverStore\FileRepository\synpd.inf_amd64_4e500223b4e4a9e4\SynZMetr.exe · signed by Microsoft Windows Hardware Compatibility Publisher
24eea825a849df085965fe64e0cbae842404dd4ba9fb000f3cbbd2a2b9bf9c2a15.3.29 13Oct11 · C:\WINDOWS\system32\DriverStore\FileRepository\synpd.inf_amd64_b28b907efbdd0634\SynZMetr.exe · signed by Microsoft Windows Hardware Compatibility Publisher
cb2d3a82d8a824814509d4dfa3a73a4fea9ccf864c0a58d1391bd4867435e84cFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.