CmdID

CmdID / Files

Tutorial.exe

Synaptics Pointing Device Tutorial file version info

Program on Windows 3 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real Tutorial.exe?

file version info and known copies
Installed inC:\WINDOWS\system32\DriverStore\FileRepository\synpd.inf_amd64_318aa16b062fddc3\
C:\WINDOWS\system32\DriverStore\FileRepository\synpd.inf_amd64_4e500223b4e4a9e4\
C:\WINDOWS\system32\DriverStore\FileRepository\synpd.inf_amd64_b28b907efbdd0634\
Signed byMicrosoft Windows Hardware Compatibility Publisher
ProductSynaptics Pointing Device Driver, Synaptics Incorporated
DescriptionSynaptics Pointing Device Tutorial

3 known copies

19.3.31.31 16Aug17 · C:\WINDOWS\system32\DriverStore\FileRepository\synpd.inf_amd64_318aa16b062fddc3\Tutorial.exe · signed by Microsoft Windows Hardware Compatibility Publisher

06c6c4a399b1e50ccba31d96ba888211cfc070d91a419caac4e4ef47afc3388f

19.0.12.95 06Jul15 · C:\WINDOWS\system32\DriverStore\FileRepository\synpd.inf_amd64_4e500223b4e4a9e4\Tutorial.exe · signed by Microsoft Windows Hardware Compatibility Publisher

010e05e3c765c0823cfee0d8b9c734969045807379c60bae80480dd56b764758

15.3.29 13Oct11 · C:\WINDOWS\system32\DriverStore\FileRepository\synpd.inf_amd64_b28b907efbdd0634\Tutorial.exe · signed by Microsoft Windows Hardware Compatibility Publisher

b9645ae5ff6c097d577a4435b4fff80248f2de69d1d5ecf2e02882fd493d2c70

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.