MupMigPlugin.dll
Microsoft Network Provider Migration Plugin Dll file version info
Library on Windows 2 known copies with hashes
Is it the real MupMigPlugin.dll?
Installed in
C:\Windows\system32\migration\C:\Windows\system32\migwiz\replacementmanifests\Microsoft-Windows-Mup\Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMicrosoft Network Provider Migration Plugin Dll
2 known copies
10.0.19041.508 (WinBuild.160101.0800) · C:\Windows\system32\migwiz\replacementmanifests\Microsoft-Windows-Mup\MupMigPlugin.dll · signed by Microsoft Windows
2a771f8b5339dfd5e69810801086f457dc33a551440203df5d9caff3a103fb6410.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\migration\MupMigPlugin.dll · signed by Microsoft Windows
dfb10635d366e55f758c74b9f33b098f7d710da625e07c2d4002be290adcf750From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.