CmdID

CmdID / Files

TableTextServiceMig.dll

TableTextService Migration DLL file version info

Library on Windows 3 known copies with hashes

Is it the real TableTextServiceMig.dll?

file version info and known copies
Installed inC:\Windows\system32\migration\
C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-TextServicesFramework-Migration-DL\
C:\Windows\SysWOW64\migration\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionTableTextService Migration DLL

3 known copies

10.0.19041.488 (WinBuild.160101.0800) · C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-TextServicesFramework-Migration-DL\TableTextServiceMig.dll · signed by Microsoft Windows

0e49cf789db9a9d16576d181af5b011d3b2ddaff75896a090321994094e9e6e5

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\migration\TableTextServiceMig.dll · signed by Microsoft Windows

ca1e6c6a334c8ad282052b60ddef8b0c2be993ae1da019d96c4811c54897649d

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\migration\TableTextServiceMig.dll · signed by Microsoft Windows

db1ac781ea400ef4fe9d31ca49dade4f4f8dd2efc77f83394b6226021c0f9501

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.