Versions

4.0.30319.34209 built by: FX452RTMGDR	0.02%
4.0.30319.34209 built by: FX452RTMGDR	0.02%
4.0.30319.18408 built by: FX451RTMGREL	1.86%
4.0.30319.18408 built by: FX451RTMGREL	1.75%
4.0.30319.18331 built by: FX45GDRSTAGE	0.02%
4.0.30319.18331 built by: FX45GDRSTAGE	0.02%
4.0.30319.17929 built by: FX45RTMREL	1.73%
4.0.30319.17929 built by: FX45RTMREL	1.28%
4.0.30319.17626 built by: FX45RCREL	0.04%
4.0.30319.17626 built by: FX45RCREL	0.02%
4.0.30319.17379 built by: FXBETAREL	0.04%
4.0.30319.17379 built by: FXBETAREL	0.02%
4.0.30319.1 (RTMRel.030319-0100)	25.98%
4.0.30319.1 (RTMRel.030319-0100)	13.46%
4.0.30128.1 (RC1Rel.030128-0100)	0.02%
4.0.21006.1 (B2Rel.021006-0100)	0.02%
2.0.50727.6387 (Win8RTM.050727-6300)	0.04%
2.0.50727.4927 (NetFXspW7.050727-4900)	26.05%
2.0.50727.4927 (NetFXspW7.050727-4900)	16.48%
2.0.50727.42 (RTM.050727-4200)	0.02%
2.0.50727.4016 (NetFxQFE.050727-4000)	2.79%
2.0.50727.4016 (NetFxQFE.050727-4000)	0.53%
2.0.50727.3053 (netfxsp.050727-3000)	6.39%
2.0.50727.3053 (netfxsp.050727-3000)	0.05%
2.0.50727.3053 (netfxsp.050727-3000)	0.84%
2.0.50727.1433 (REDBITS.050727-1400)	0.51%
2.0.50727.1426 (REDBITS.050727-1400)	0.02%

This is a Windows system installed file with Windows File Protection (WFP) enabled.

There are 27 versions of mscorsvw.exe in the wild, the latest version being 4.0.30319.34209 built by: FX452RTMGDR. It is started as a Windows Service called 'Microsoft .NET Framework NGEN v4.0.30319_X86' with the name 'clr_optimization_v4.0.30319_32' and described as “Microsoft .NET Framework NGEN”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 99.21 KB. The file is a digitally signed and issued to Microsoft Corporation by Microsoft Corporation. The programs Microsoft Visual J# 2.0 Redistributable Package, Microsoft Report Viewer Redistributable 2008 and Microsoft Visual J# 2.0 Redistributable Package - SE have been observed as installing specific variations of mscorsvw.exe. During the process's lifecycle, the typical CPU resource utilization is less than 0.01%, the average private memory consumption is about 13 MB with the maximum memory reaching around 15.04 MB. Addionally, typically read and write I/O disk operations is about 247.2 KB per minute for reads and 4.24 KB per minute for writes.

.NET Runtime Optimization Service for the .NET Framework is a software framework developed by Microsoft that includes a large library and provides language interoperability. Programs written for the .NET Framework execute in a software environment known as the Common Language Runtime (CLR), an application virtual machine that provides services such as security, memory management, and exception handling. The class library and the CLR together make up the .NET Framework.