CmdID

CmdID / Files

netiomig.dll

Netio Migration Plugin file version info

Library on Windows 2 known copies with hashes

Is it the real netiomig.dll?

file version info and known copies
Installed inC:\Windows\system32\migration\
C:\Windows\SysWOW64\migration\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionNetio Migration Plugin

2 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\migration\netiomig.dll · signed by Microsoft Windows

55eb7c72b032dd0631fc0b00b22df712fc55a397d4002e54ed7980d633d609cb

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\migration\netiomig.dll · signed by Microsoft Windows

e267a0891b7e66654f9b2ddfc35cf63eea18f10fb899240f236eb1dc077558d3

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.