CmdID

CmdID / Files

MsiMsp.exe

Windows Installer Patch generation command-line tool file version info

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real MsiMsp.exe?

file version info and known copies
Installed inC:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\
Signed byMicrosoft Windows Kits Publisher
ProductWindows Installer, Microsoft Corporation
DescriptionWindows Installer Patch generation command-line tool

2 known copies

5.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\MsiMsp.exe · signed by Microsoft Corporation

8488380ccf6baea8786418a516823bd356491239ea456de78a14c3da29b92586

5.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\MsiMsp.exe · signed by Microsoft Windows Kits Publisher

9dbf3e76f0bcb5f977bf9fa7f7e3f8ada289a558dc5cddc1ad33d9b83cb2c990

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.