CmdID

CmdID / Files

Msimerg.exe

MSI database merge tool file version info

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real Msimerg.exe?

file version info and known copies
Installed inC:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\
Signed byMicrosoft Windows Kits Publisher
ProductWindows Installer, Microsoft Corporation
DescriptionMSI database merge tool

2 known copies

5.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\Msimerg.exe · signed by Microsoft Windows Kits Publisher

12dea7637207886fe76d5c215f57fe73568f09cdaf84556f2a6d3a1b728609da

5.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\Msimerg.exe · signed by Microsoft Corporation

4b5c3f0fa2c0e74dbd15a068f8de0dc3d16057e2bc32542804e71db7d1a56447

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.