netswitchteamcim.dll
VM Switch Teaming WMI Provider file version info
Library on Windows 1 known copy with hashes
Is it the real netswitchteamcim.dll?
Installed in
C:\Windows\system32\wbem\Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionVM Switch Teaming WMI Provider
1 known copy
10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\wbem\netswitchteamcim.dll · signed by Microsoft Windows
SHA-256
d3e3b2490a4203f280e9e4dac9a27716e789fd90b534e44f17428c1cc7540401SHA-177d81afd6c50fcd541c7cb0e3f7e60eb3b01fbdeMD5d995319165ea01b5c987cf1f91d19fc4From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<hash>".whatis() says which known copy an MD5, SHA-1 or SHA-256 is.