CmdID

CmdID / Files

mighost.exe

Migration Plugins host program file version info

Program on Windows 7 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real mighost.exe?

file version info and known copies
Installed inC:\Windows\system32\migwiz\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMigration Plugins host program

7 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\migwiz\mighost.exe · signed by Microsoft Windows

8d9289d6ce75e7033092ce22f348fe8e6a7c4ee5a6413948f5f5855e98df5a06

10.0.19041.630 (WinBuild.160101.0800) · C:\Windows\system32\migwiz\mighost.exe · signed by Microsoft Windows

be5bed6ca3fab9427f54f93ddf82f3b6b9ece6f59bad9699316fb724d07509f0

10.0.19041.423 (WinBuild.160101.0800) · C:\Windows\system32\migwiz\mighost.exe · signed by Microsoft Windows

c8240fc9f799a5eb4fcfa83acee64d53b8d1dc955269e1cbef816cfe72f91eb8

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\migwiz\mighost.exe · signed by Microsoft Windows

2423b9962ea0bea7f2368727c3aa33ff4cc62bcec9ac4bf2094c4cbd8208cb7b

10.0.18362.778 (WinBuild.160101.0800) · C:\WINDOWS\system32\migwiz\mighost.exe · signed by Microsoft Windows

4d87112221068abcdf9e73b3207f50f92f3728f0d054505107c597a4c1c10fe2

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\migwiz\mighost.exe · signed by Microsoft Windows

03dc58aa00e5773631c70e11766fad0b2e244798adf706e0967f54ab05570c1d

10.0.14393.3503 (rs1_release.200131-0410) · C:\Windows\system32\migwiz\mighost.exe · signed by Microsoft Windows

ca78b591ffd08fd8329de02ce35f927ba198255d2b2f5a387569866dc5ac3f97

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.