Should I block it?
No, this file is 100% safe to run.
Additional versions
Relationships
Parent process
Related files
PE file structure |
Show functions |
Import table
advapi32.dll
TraceMessage
kernel32.dll
UnhandledExceptionFilter, GetCurrentProcess, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, SetUnhandledExceptionFilter, InterlockedCompareExchange, Sleep, InterlockedExchange, TerminateProcess, GetModuleHandleA
msvcrt.dll
DllMain
ntdll.dll
RtlAllocateHeap, RtlImageNtHeader, RtlFreeHeap
MQSVC.exe
Message Queuing Service by Microsoft
Version: | 6.1.7600.16385 (win7_rtm.090713-1255) |
MD5: | faaeaef99e53561beee58f946ca56f0d |
SHA1: | 2d346e5af1b48bc8121d5205a0b93e0291886887 |
SHA256: | 78ac692c4b80616e4c44ed20954b8d2fce2215056c2ed3522123e5b50a7ce67a |
This is a Windows system installed file with Windows File Protection (WFP) enabled.
What is MQSVC.exe?
Microsoft Message Queuing or MSMQ is a Message Queue implementation. MSMQ is essentially a messaging protocol that allows applications running on separate servers/processes to communicate in a failsafe manner. A queue is a temporary storage location from which messages can be sent and received reliably, as and when conditions permit.
Overview
mqsvc.exe runs as a service under the name Accodamento messaggi (MSMQ) with minimal NETWORK SERVICE privileges on the local PC and acts as the computer on the network. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). This version is designed to run on Windows 7 and is compiled as a 64 bit program.
Details
File name: | mqsvc.exe |
Publisher: | Microsoft Corporation |
Product name: | Message Queuing Service |
Description: | Microsoft® Windows® Operating System |
Typical file path: | C:\Windows\System32\mqsvc.exe |
File version: | 6.1.7600.16385 (win7_rtm.090713-1255) |
Product version: | 6.1.7600.16385 |
Size: | 9 KB (9,216 bytes) |
Digital DNA |
File packed: | No |
Code language: | Microsoft Visual C# / Basic .NET |
.NET CLR: | Yes |
.NET NGENed: | No |
More details
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'MSMQ' (Accodamento messaggi)
- MSMQ
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
CPU |
Total CPU: | 0.00049993% | |
Kernel CPU: | 0.00038431% | |
User CPU: | 0.00011562% | |
Kernel CPU time: | 128,542 ms/min | |
CPU cycles: | 20,313/sec | |
Memory |
Private memory: | 5.3 MB | |
Private (maximum): | 8.05 MB | |
Private (minimum): | 5.53 MB | |
Non-paged memory: | 5.3 MB | |
Virtual memory: | 61.32 MB | |
Virtual memory (peak): | 63.79 MB | |
Working set: | 5.97 MB | |
Working set (peak): | 9.06 MB | |
Page faults: | 5,518/min | |
I/O |
I/O read transfer: | 405 Bytes/sec | |
I/O read operations: | 1/sec | |
I/O write transfer: | 225 Bytes/sec | |
I/O write operations: | 1/sec | |
I/O other transfer: | 39 Bytes/sec | |
I/O other operations: | 4/sec | |
Resource allocations |
Threads: | 21 | |
Handles: | 233 | |
Process properties
Integrety level: | System |
Platform: | 64-bit |
Command line: | C:\Windows\System32\mqsvc.exe |
Owner: | NETWORK SERVICE |
Windows Service |
Service name: | MSMQ |
Display name: | Accodamento messaggi |
Description: | “Fornisce una infrastruttura di messaggistica e uno strumento di sviluppo per la creazione di applicazioni di messaggistica distribuita per reti e programmi Windows. Se il servizio viene arrestato, i messaggi distribuiti non saranno disponibili. Se il servizio viene disabilitato, i servizi da esso esplicitamente dipendenti non verranno avviati.” |
Type: | Win32OwnProcess |
Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
ntdll.dll |
Total CPU: | 0.00676188% | |
Kernel CPU: | 0.00675963% | |
User CPU: | 0.00000224% | |
CPU cycles: | 44,902/sec | |
Memory: | 1.66 MB | |
sechost.dll |
Total CPU: | 0.00065374% | |
Kernel CPU: | 0.00056615% | |
User CPU: | 0.00008759% | |
CPU cycles: | 12,443/sec | |
Memory: | 124 KB | |
MqLogMgr.dll |
Total CPU: | 0.00021412% | |
Kernel CPU: | 0.00000380% | |
User CPU: | 0.00021032% | |
CPU cycles: | 6,394/sec | |
Memory: | 144 KB | |
mqsvc.exe (main module) |
Total CPU: | 0.00016813% | |
Kernel CPU: | 0.00011918% | |
User CPU: | 0.00004895% | |
CPU cycles: | 5,389/sec | |
Memory: | 28 KB | |
mqsec.dll |
Total CPU: | 0.00016616% | |
Kernel CPU: | 0.00005414% | |
User CPU: | 0.00011202% | |
CPU cycles: | 135/sec | |
Memory: | 272 KB | |
MQQM.dll |
Total CPU: | 0.00014669% | |
Kernel CPU: | 0.00004147% | |
User CPU: | 0.00010522% | |
CPU cycles: | 771/sec | |
Memory: | 1.53 MB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
OS version | distribution |
Windows 7 Home Premium |
37.95% |
|
Windows 7 Ultimate |
19.49% |
|
Windows 8 Pro |
13.85% |
|
Windows 7 Professional |
9.74% |
|
Windows Vista Home Premium |
4.62% |
|
Windows 8 Pro with Media Center |
4.10% |
|
Windows 8.1 Pro |
3.59% |
|
Windows 8 |
3.08% |
|
Windows 8.1 |
1.03% |
|
Windows 7 Starter |
1.03% |
|
Windows Vista Home Basic |
1.03% |
|
Windows 8 Release Preview |
0.51% |
|
Distribution by country
United States installs about 46.63% of Message Queuing Service.
Distribution by PC manufacturer
PC Manufacturer | distribution |
Hewlett-Packard |
31.21% |
|
ASUS |
21.97% |
|
Acer |
18.50% |
|
Dell |
11.56% |
|
Toshiba |
5.78% |
|
GIGABYTE |
2.89% |
|
Medion |
2.31% |
|
MSI |
2.31% |
|
Samsung |
1.16% |
|
Sahara |
1.16% |
|
American Megatrends |
1.16% |
|