Should I block it?
No, this file is 100% safe to run.
Additional versions
Relationships
Parent process
Related files
PE file structure
|
Show functions |
Import table
advapi32.dll
TraceMessage
kernel32.dll
UnhandledExceptionFilter, GetCurrentProcess, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, SetUnhandledExceptionFilter, InterlockedCompareExchange, Sleep, InterlockedExchange, TerminateProcess, GetModuleHandleA
msvcrt.dll
DllMain
ntdll.dll
RtlAllocateHeap, RtlImageNtHeader, RtlFreeHeap
MQSVC.exe
Message Queuing Service by Microsoft
| Version: | 6.1.7600.16385 (win7_rtm.090713-1255) |
| MD5: | faaeaef99e53561beee58f946ca56f0d |
| SHA1: | 2d346e5af1b48bc8121d5205a0b93e0291886887 |
| SHA256: | 78ac692c4b80616e4c44ed20954b8d2fce2215056c2ed3522123e5b50a7ce67a |
This is a Windows system installed file with Windows File Protection (WFP) enabled.
What is MQSVC.exe?
Microsoft Message Queuing or MSMQ is a Message Queue implementation. MSMQ is essentially a messaging protocol that allows applications running on separate servers/processes to communicate in a failsafe manner. A queue is a temporary storage location from which messages can be sent and received reliably, as and when conditions permit.
Overview
mqsvc.exe runs as a service under the name Accodamento messaggi (MSMQ) with minimal NETWORK SERVICE privileges on the local PC and acts as the computer on the network. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). This version is designed to run on Windows 7 and is compiled as a 64 bit program.
Details
| File name: | mqsvc.exe |
| Publisher: | Microsoft Corporation |
| Product name: | Message Queuing Service |
| Description: | Microsoft® Windows® Operating System |
| Typical file path: | C:\Windows\System32\mqsvc.exe |
| File version: | 6.1.7600.16385 (win7_rtm.090713-1255) |
| Product version: | 6.1.7600.16385 |
| Size: | 9 KB (9,216 bytes) |
| Digital DNA |
| File packed: | No |
| Code language: | Microsoft Visual C# / Basic .NET |
| .NET CLR: | Yes |
| .NET NGENed: | No |
More details
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'MSMQ' (Accodamento messaggi)
- MSMQ
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00049993% | |
| Kernel CPU: | 0.00038431% | |
| User CPU: | 0.00011562% | |
| Kernel CPU time: | 128,542 ms/min | |
| CPU cycles: | 20,313/sec | |
| Memory |
| Private memory: | 5.3 MB | |
| Private (maximum): | 8.05 MB | |
| Private (minimum): | 5.53 MB | |
| Non-paged memory: | 5.3 MB | |
| Virtual memory: | 61.32 MB | |
| Virtual memory (peak): | 63.79 MB | |
| Working set: | 5.97 MB | |
| Working set (peak): | 9.06 MB | |
| Page faults: | 5,518/min | |
| I/O |
| I/O read transfer: | 405 Bytes/sec | |
| I/O read operations: | 1/sec | |
| I/O write transfer: | 225 Bytes/sec | |
| I/O write operations: | 1/sec | |
| I/O other transfer: | 39 Bytes/sec | |
| I/O other operations: | 4/sec | |
| Resource allocations |
| Threads: | 21 | |
| Handles: | 233 | |
Process properties
| Integrety level: | System |
| Platform: | 64-bit |
| Command line: | C:\Windows\System32\mqsvc.exe |
| Owner: | NETWORK SERVICE |
| Windows Service |
| Service name: | MSMQ |
| Display name: | Accodamento messaggi |
| Description: | “Fornisce una infrastruttura di messaggistica e uno strumento di sviluppo per la creazione di applicazioni di messaggistica distribuita per reti e programmi Windows. Se il servizio viene arrestato, i messaggi distribuiti non saranno disponibili. Se il servizio viene disabilitato, i servizi da esso esplicitamente dipendenti non verranno avviati.” |
| Type: | Win32OwnProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
| ntdll.dll |
| Total CPU: | 0.00676188% | |
| Kernel CPU: | 0.00675963% | |
| User CPU: | 0.00000224% | |
| CPU cycles: | 44,902/sec | |
| Memory: | 1.66 MB | |
| sechost.dll |
| Total CPU: | 0.00065374% | |
| Kernel CPU: | 0.00056615% | |
| User CPU: | 0.00008759% | |
| CPU cycles: | 12,443/sec | |
| Memory: | 124 KB | |
| MqLogMgr.dll |
| Total CPU: | 0.00021412% | |
| Kernel CPU: | 0.00000380% | |
| User CPU: | 0.00021032% | |
| CPU cycles: | 6,394/sec | |
| Memory: | 144 KB | |
| mqsvc.exe (main module) |
| Total CPU: | 0.00016813% | |
| Kernel CPU: | 0.00011918% | |
| User CPU: | 0.00004895% | |
| CPU cycles: | 5,389/sec | |
| Memory: | 28 KB | |
| mqsec.dll |
| Total CPU: | 0.00016616% | |
| Kernel CPU: | 0.00005414% | |
| User CPU: | 0.00011202% | |
| CPU cycles: | 135/sec | |
| Memory: | 272 KB | |
| MQQM.dll |
| Total CPU: | 0.00014669% | |
| Kernel CPU: | 0.00004147% | |
| User CPU: | 0.00010522% | |
| CPU cycles: | 771/sec | |
| Memory: | 1.53 MB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
37.95% |
|
| Windows 7 Ultimate |
19.49% |
|
| Windows 8 Pro |
13.85% |
|
| Windows 7 Professional |
9.74% |
|
| Windows Vista Home Premium |
4.62% |
|
| Windows 8 Pro with Media Center |
4.10% |
|
| Windows 8.1 Pro |
3.59% |
|
| Windows 8 |
3.08% |
|
| Windows 8.1 |
1.03% |
|
| Windows 7 Starter |
1.03% |
|
| Windows Vista Home Basic |
1.03% |
|
| Windows 8 Release Preview |
0.51% |
|
Distribution by country
United States installs about 46.63% of Message Queuing Service.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Hewlett-Packard |
31.21% |
|
| ASUS |
21.97% |
|
| Acer |
18.50% |
|
| Dell |
11.56% |
|
| Toshiba |
5.78% |
|
| GIGABYTE |
2.89% |
|
| Medion |
2.31% |
|
| MSI |
2.31% |
|
| Samsung |
1.16% |
|
| Sahara |
1.16% |
|
| American Megatrends |
1.16% |
|