Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

4.0.30319.18408 built by: FX451RTMGREL 1.01%
4.0.30319.18408 built by: FX451RTMGREL 0.25%
4.0.30319.1014 built by: RTMGDR 4.80%
4.0.30319.1 built by: RTMRel 76.52%
4.0.30319.1 built by: RTMRel 7.83%
4.0.30319.1 built by: RTMRel 0.76%
4.0.30319.1 built by: RTMRel 0.51%
4.0.30319.1 built by: RTMRel 0.25%
4.0.30319.1 built by: RTMRel 0.25%
4.0.30319.1 built by: RTMRel 7.32%
4.0.30128.1 built by: RC1Rel 0.25%
4.0.21006.1 built by: B2Rel 0.25%

Relationships

Parent process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
TraceEvent, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, RegisterServiceCtrlHandlerExW, SetServiceStatus, StartServiceCtrlDispatcherW, RegNotifyChangeKeyValue, RegCloseKey, RegQueryInfoKeyW, RegQueryValueExW, RegOpenKeyExW, AccessCheck, MapGenericMask, GetSecurityInfo, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, SetEntriesInAclW, GetSidSubAuthority, GetSidSubAuthorityCount, GetTokenInformation, OpenProcessToken, OpenThreadToken, CopySid, GetLengthSid, ConvertSidToStringSidW, EqualSid, CreateWellKnownSid, RegEnumValueW, EventWrite, EventRegister, EventUnregister
kernel32.dll
GetSystemWindowsDirectoryW, LocalAlloc, FindClose, FindFirstFileW, SetLastError, GetModuleHandleExW, GetLocaleInfoW, GetSystemInfo, OutputDebugStringA, WideCharToMultiByte, MultiByteToWideChar, CompareStringW, LCMapStringW, ReadFile, GetFileInformationByHandle, ResetEvent, SetEvent, WaitForSingleObjectEx, CreateEventW, IsProcessorFeaturePresent, VirtualQuery, VirtualAlloc, GetVersion, GetExitCodeThread, WaitForMultipleObjectsEx, CreateThread, WaitForSingleObject, FindFirstChangeNotificationW, FindCloseChangeNotification, Sleep, GlobalMemoryStatusEx, QueueUserWorkItem, GetVersionExW, GetModuleHandleW, GetProcAddress, WriteFile, GetLastError, CreateFileW, SetErrorMode, RtlCaptureStackBackTrace, InterlockedExchange, InterlockedCompareExchange, HeapSetInformation, EncodePointer, DecodePointer, SetUnhandledExceptionFilter, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, IsDebuggerPresent, RaiseException, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, CloseHandle, InterlockedIncrement, InterlockedDecrement, LocalFree, GetCurrentThread, CreateFileMappingW, MapViewOfFileEx, UnmapViewOfFile, GetTickCount64
msvcp110_clr0400.dll
DllMain
msvcr100_clr0400.dll
DllMain
msvcr110_clr0400.dll
DllMain
rpcrt4.dll
RpcImpersonateClient, RpcServerUseProtseqEpW, RpcServerRegisterIfEx, RpcServerUnregisterIfEx, RpcStringFreeW, UuidToStringW, UuidCreate, NdrAsyncServerCall, RpcAsyncCompleteCall, RpcMgmtStopServerListening, RpcServerListen, RpcRevertToSelf
shell32.dll
SHGetFolderPathW

wpffontcache_v0400.exe

Microsoft .NET Framework by Microsoft Corporation (Signed)

Remove wpffontcache_v0400.exe
Version:   4.0.30319.1 built by: RTMRel
MD5:   dcf3e3edf5109ee8bc02fe6e1f045795
SHA1:   e8af86bbaa9c2f3853debc353424523754937aad
SHA256:   4b8e14b1cfb095982d34daec336114f5039d7793080fb787dc95a63b6b945dd0

Overview

wpffontcache_v0400.exe runs as a service under the name Windows Presentation Foundation Font Cache 4.0.0.0 (WPFFontCache_v0400) with extensive SYSTEM privileges (full administrator access). The file is digitally signed by Microsoft Corporation.

DetailsDetails

File name:wpffontcache_v0400.exe
Publisher:Microsoft Corporation
Product name:Microsoft® .NET Framework
Description:wpffontcache_v0400.exe
Typical file path:C:\windows\microsoft.net\framework\v4.0.30319\wpf\wpffontcache_v0400.exe
Original name:wpffontcache_v0400.exe.mui
File version:4.0.30319.1 built by: RTMRel
Product version:4.0.30319.1
Size:735.84 KB (753,504 bytes)
Certificate
Issued to:Microsoft Corporation
Authority (CA):Microsoft Corporation
Effective date:Monday, December 7, 2009
Expiration date:Monday, March 7, 2011
Digital DNA
Entropy:6.374822
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'WPFFontCache_v0400' (Windows Presentation Foundation Font Cache 4.0.0.0)
  • 'WPFFontCache_v0400'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00108671%
0.028634%
Kernel CPU:0.00064711%
0.013761%
User CPU:0.00043960%
0.014873%
Kernel CPU time:33,321,693 ms/min
100,923,805ms/min
CPU cycles:11,807/sec
17,470,203/sec
Context switches:701/sec
284/sec
Memory
Private memory:2.12 MB
21.59 MB
Private (maximum):5.31 MB
Private (minimum):2.69 MB
Non-paged memory:2.12 MB
21.59 MB
Virtual memory:43.99 MB
140.96 MB
Virtual memory (peak):48.21 MB
169.69 MB
Working set:3.36 MB
18.61 MB
Working set (peak):6.24 MB
37.95 MB
Page faults:263,070/min
2,039/min
I/O
I/O read transfer:609 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:0 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:136.08 KB/sec
448.09 KB/min
I/O other operations:11,092/sec
1,671/min
Resource allocations
Threads:5
12
Handles:77
600
GUI GDI count:4
103
GUI USER count:1
49

BehaviorsProcess properties

Integrety level:Undefined
Platform:32-bit
Command line:C:\windows\microsoft.net\framework\v4.0.30319\wpf\wpffontcache_v0400.exe
Owner:SYSTEM
Windows Service
Service name:WPFFontCache_v0400
Display name:Windows Presentation Foundation Font Cache 4.0.0.0
Description:“Optimizes performance of Windows Presentation Foundation (WPF) applications by caching commonly used font data. WPF applications will start this service if it is not already running. It can be disabled, though doing so will degrade the performance of WPF applications.”
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
WPFFontCache_v0400.exe (main module)
Total CPU:1.93186277%
0.272967%
Kernel CPU:1.00336929%
0.107585%
User CPU:0.92849348%
0.165382%
CPU cycles:3,607/sec
5,741,424/sec
Context switches:17/sec
79/sec
Memory:744 KB
1.16 MB
npggNT.des
Total CPU:0.04138217%
Kernel CPU:0.00000000%
User CPU:0.04138217%
Memory:284 KB
ADVAPI32.dll
Total CPU:0.00029116%
Kernel CPU:0.00000000%
User CPU:0.00029116%
Memory:620 KB
RPCRT4.dll
Total CPU:0.00017639%
Kernel CPU:0.00013663%
User CPU:0.00003976%
CPU cycles:1,936/sec
Memory:780 KB
ntdll.dll
Total CPU:0.00000878%
Kernel CPU:0.00000878%
User CPU:0.00000000%
CPU cycles:2/sec
Memory:1.12 MB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 58.00%
Windows Vista Home Premium 31.00%
Windows Vista Home Basic 6.00%
Windows Vista Ultimate 2.50%
Windows Vista Business 2.50%

Distribution by countryDistribution by country

United States installs about 56.06% of Microsoft® .NET Framework.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 35.43%
Hewlett-Packard 14.17%
Toshiba 9.45%
American Megatrends 9.06%
Intel 6.30%
Gateway 4.72%
ASUS 3.94%
Sony 3.94%
Compaq 3.15%
Acer 2.76%
GIGABYTE 2.36%
Lenovo 2.36%
Sahara 1.18%
Samsung 0.79%
Packard Bell 0.39%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE