Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

3.0.6920.7903 built by: Win9Rel 3.75%
3.0.6920.7903 built by: Win9Rel 0.07%
3.0.6920.7512 built by: Win9Rel 0.18%
3.0.6920.7512 built by: Win9Rel 0.04%
3.0.6920.6387 built by: Win8RTM 1.34%
3.0.6920.6387 built by: Win8RTM 11.24%
3.0.6920.6266 built by: Win8RTM 0.07%
3.0.6920.6266 built by: Win8RTM 0.07%
3.0.6920.5011 built by: Win7SP1 38.09%
3.0.6920.4902 built by: NetFXw7 19.68%
3.0.6920.4902 built by: NetFXw7 3.43%
3.0.6920.4000 built by: QFE 5.62%
3.0.6920.4000 built by: QFE 1.41%
3.0.6920.1453 built by: NetFX 0.04%
3.0.6920.1453 built by: NetFX 0.60%
3.0.6920.1427 built by: SP 13.60%
3.0.6920.1427 built by: SP 0.11%
3.0.6920.1109 (lh_tools_devdiv_wpf.071009-1109) 0.64%
3.0.6920.1107 (lh_tools_devdiv_wpf.070904-1723) 0.04%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
mscoree.dll
DllMain

PresentationFontCache.exe

Microsoft .NET Framework by Microsoft Corporation (Signed)

Remove PresentationFontCache.exe
Version:   3.0.6920.5011 built by: Win7SP1
MD5:   a8b7f3818ab65695e3a0bb3279f6dce6
SHA1:   abe2a3987b4e9b86b84c7ea9b58a5848e9a12d02
SHA256:   89fcf10f599767e67a1e011753e34da44eaa311f105dbf69549009ed932a60f0
This is a Windows system installed file with Windows File Protection (WFP) enabled.

Overview

PresentationFontCache.exe runs as a service under the name Cache tipi di carattere Windows Presentation Foundation 3.0.0.0 (FontCache3.0.0.0) with minimum LOCAL SERVICE privileges (predefined local account used by the service control manager) on the local PC and presents anonymous credentials on the network. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Microsoft Corporation.

DetailsDetails

File name:PresentationFontCache.exe
Publisher:Microsoft Corporation
Product name:Microsoft® .NET Framework
Description:PresentationFontCache.exe
Typical file path:C:\windows\microsoft.net\framework\v3.0\wpf\presentationfontcache.exe
File version:3.0.6920.5011 built by: Win7SP1
Product version:3.0.6920.5011
Size:41.85 KB (42,856 bytes)
Certificate
Issued to:Microsoft Corporation
Authority (CA):Microsoft Corporation
Effective date:Wednesday, October 22, 2008
Expiration date:Friday, January 22, 2010
Digital DNA
Entropy:4.371954
File packed:No
Code language:Microsoft Visual C# / Basic .NET
.NET CLR:Yes
.NET NGENed:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'FontCache3.0.0.0' (Windows Presentation Foundation Font Cache 3.0.0.0)

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00070172%
0.028634%
Kernel CPU:0.00033926%
0.013761%
User CPU:0.00036246%
0.014873%
Kernel CPU time:149,194 ms/min
100,923,805ms/min
CPU cycles:84,744/sec
17,470,203/sec
Context switches:254/sec
284/sec
Memory
Private memory:27.58 MB
21.59 MB
Private (maximum):18.81 MB
Private (minimum):12.62 MB
Non-paged memory:27.58 MB
21.59 MB
Virtual memory:506.93 MB
140.96 MB
Virtual memory (peak):513.24 MB
169.69 MB
Working set:13.14 MB
18.61 MB
Working set (peak):22 MB
37.95 MB
Page faults:7,497/min
2,039/min
I/O
I/O read transfer:10.52 KB/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O other transfer:48 Bytes/sec
448.09 KB/min
I/O other operations:6/sec
1,671/min
Resource allocations
Threads:6
12
Handles:153
600

BehaviorsProcess properties

Integrety level:System
Platform:64-bit
Command line:C:\windows\microsoft.net\framework64\v3.0\wpf\presentationfontcache.exe
Owner:LOCAL SERVICE
Windows Service
Service name:FontCache3.0.0.0
Display name:Cache tipi di carattere Windows Presentation Foundation 3.0.0.0
Description:“Consente di ottimizzare le prestazioni delle applicazioni Windows Presentation Foundation (WPF) tramite la memorizzazione nella cache dei dati relativi ai tipi di carattere di utilizzo comune. Il servizio verrà avviato dalle applicazioni WPF se non è già in esecuzione. È possibile disattivarlo, sebbene ciò comporti un peggioramento delle prestazioni delle applicazioni WPF.”
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
mscorwks.dll
Total CPU:3.80539314%
0.272967%
Kernel CPU:0.00105557%
0.107585%
User CPU:3.80433757%
0.165382%
CPU cycles:82,705,407/sec
5,741,424/sec
Context switches:16/sec
79/sec
Memory:9.61 MB
1.16 MB
PresentationFontCache.exe (main module)
Total CPU:0.00183494%
Kernel CPU:0.00090647%
User CPU:0.00092847%
CPU cycles:43,171/sec
Memory:48 KB
ntdll.dll
Total CPU:0.00001010%
Kernel CPU:0.00000220%
User CPU:0.00000790%
CPU cycles:88/sec
Memory:1.66 MB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 39.00%
Windows 8.1 19.50%
Windows 7 Ultimate 14.50%
Windows 8.1 Single Language 7.00%
Windows 8.1 Pro 6.50%
Windows 7 Professional 6.50%
Windows 8.1 Pro with Media Center 3.00%
Microsoft Windows XP 2.00%
Windows 7 Home Basic 1.00%
Windows 8.1 N 0.50%
Windows 8.1 Enterprise Evaluation 0.50%

Distribution by countryDistribution by country

United States installs about 46.23% of Microsoft® .NET Framework.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 20.58%
Hewlett-Packard 19.75%
ASUS 18.93%
Acer 13.99%
Toshiba 11.52%
Lenovo 6.58%
Sony 4.12%
GIGABYTE 2.06%
Alienware 1.23%
Samsung 1.23%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE