mighost.exe

  • File Path: C:\Windows\system32\migwiz\mighost.exe
  • Description: Migration Plugins host program

Screenshot

mighost.exe

Hashes

Type Hash
MD5 BAD04F25F7495A2CCB0CE1E8F043D748
SHA1 7FC7DA893BA2E15EBFDF5FF2F62BC9ADA736D8BF
SHA256 BE5BED6CA3FAB9427F54F93DDF82F3B6B9ECE6F59BAD9699316FB724D07509F0
SHA384 E7075C9519843D8449D4E011217EE5345C56D8BB2AEAE175FB93900D93B9199A8F73A737CBF82B278E0933046DC63B43
SHA512 4EA8F8D4D12010E41963452A5380E42070F50B4B5A121186707F00CD0D5EA4AF72ED21C4E6F3730D518BEB2E7387F76D99095F2C3DBF7D1D45363F6272143944
SSDEEP 6144:rofOiYlr1OlojDuUlMtq10Q8m7NNqM9N+hN1UFpfNS5iXjD56Gpovgp2H32nq54x:r+9eDuUlEqatglsLb0
IMP 1A2E6FBE71CAA18E49B7AEBBC2EAC135
PESHA1 6916B641FF94340D4BD91A7D352DEBB5D4338DF0
PE256 C77A91926289594A7B5789E1A453E5938D859726FE9E22BA2EE57372922FAA95

Runtime Data

Child Processes:

conhost.exe

Window Title:

MigHost.exe

Open Handles:

Path Type
(R-D) C:\Windows\Fonts\StaticCache.dat File
(RW-) C:\Users\user File
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2 Section
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section
\Sessions\1\Windows\Theme1175649999 Section
\Windows\Theme601709542 Section

Loaded Modules:

Path
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\system32\migwiz\mighost.exe
C:\Windows\SYSTEM32\ntdll.dll

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: MigHost.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.630 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.630
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/76
  • VirusTotal Link: https://www.virustotal.com/gui/file/be5bed6ca3fab9427f54f93ddf82f3b6b9ece6f59bad9699316fb724d07509f0/detection

File Similarity (ssdeep match)

File Score
C:\WINDOWS\system32\migwiz\mighost.exe 75
C:\WINDOWS\system32\migwiz\mighost.exe 83
C:\Windows\system32\migwiz\mighost.exe 82
C:\Windows\system32\migwiz\mighost.exe 40
C:\Windows\system32\migwiz\mighost.exe 82
C:\Windows\system32\migwiz\mighost.exe 83

MIT License. Copyright (c) 2020-2021 Strontic.