CmdID

CmdID / Files

WebCache.exe

Microsoft Web Cache file version info

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real WebCache.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductInternet Explorer, Microsoft Corporation
DescriptionMicrosoft Web Cache

2 known copies

11.00.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\WebCache.exe · signed by Microsoft Windows

925f4358d32c7dfc9d8b8e0107ec638d23b72b538e45e438f5686c83e342a4c3

11.00.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\WebCache.exe · signed by Microsoft Windows

27af8daecfa7053d0e33c5b7d2d6b79ff7bc231c193e0d3fff3f3d65d3283d2a

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.