PresentationFontCache.exe
Microsoft .NET Framework by Microsoft Corporation (Signed)
| Version: | 3.0.6920.5011 built by: Win7SP1 |
| MD5: | a8b7f3818ab65695e3a0bb3279f6dce6 |
| SHA1: | abe2a3987b4e9b86b84c7ea9b58a5848e9a12d02 |
| SHA256: | 89fcf10f599767e67a1e011753e34da44eaa311f105dbf69549009ed932a60f0 |
This is a Windows system installed file with Windows File Protection (WFP) enabled.
Overview
PresentationFontCache.exe runs as a service under the name Cache tipi di carattere Windows Presentation Foundation 3.0.0.0 (FontCache3.0.0.0) with minimum LOCAL SERVICE privileges (predefined local account used by the service control manager) on the local PC and presents anonymous credentials on the network. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Microsoft Corporation.
Details
| File name: | PresentationFontCache.exe |
| Publisher: | Microsoft Corporation |
| Product name: | Microsoft® .NET Framework |
| Description: | PresentationFontCache.exe |
| Typical file path: | C:\windows\microsoft.net\framework\v3.0\wpf\presentationfontcache.exe |
| File version: | 3.0.6920.5011 built by: Win7SP1 |
| Product version: | 3.0.6920.5011 |
| Size: | 41.85 KB (42,856 bytes) |
| Certificate |
| Issued to: | Microsoft Corporation |
| Authority (CA): | Microsoft Corporation |
| Effective date: | Wednesday, October 22, 2008 |
| Expiration date: | Friday, January 22, 2010 |
| Digital DNA |
| Entropy: | 4.371954 |
| File packed: | No |
| Code language: | Microsoft Visual C# / Basic .NET |
| .NET CLR: | Yes |
| .NET NGENed: | No |
More details
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'FontCache3.0.0.0' (Windows Presentation Foundation Font Cache 3.0.0.0)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00070172% | |
| Kernel CPU: | 0.00033926% | |
| User CPU: | 0.00036246% | |
| Kernel CPU time: | 149,194 ms/min | |
| CPU cycles: | 84,744/sec | |
| Context switches: | 254/sec | |
| Memory |
| Private memory: | 27.58 MB | |
| Private (maximum): | 18.81 MB | |
| Private (minimum): | 12.62 MB | |
| Non-paged memory: | 27.58 MB | |
| Virtual memory: | 506.93 MB | |
| Virtual memory (peak): | 513.24 MB | |
| Working set: | 13.14 MB | |
| Working set (peak): | 22 MB | |
| Page faults: | 7,497/min | |
| I/O |
| I/O read transfer: | 10.52 KB/sec | |
| I/O read operations: | 1/sec | |
| I/O other transfer: | 48 Bytes/sec | |
| I/O other operations: | 6/sec | |
| Resource allocations |
| Threads: | 6 | |
| Handles: | 153 | |
Process properties
| Integrety level: | System |
| Platform: | 64-bit |
| Command line: | C:\windows\microsoft.net\framework64\v3.0\wpf\presentationfontcache.exe |
| Owner: | LOCAL SERVICE |
| Windows Service |
| Service name: | FontCache3.0.0.0 |
| Display name: | Cache tipi di carattere Windows Presentation Foundation 3.0.0.0 |
| Description: | “Consente di ottimizzare le prestazioni delle applicazioni Windows Presentation Foundation (WPF) tramite la memorizzazione nella cache dei dati relativi ai tipi di carattere di utilizzo comune. Il servizio verrà avviato dalle applicazioni WPF se non è già in esecuzione. È possibile disattivarlo, sebbene ciò comporti un peggioramento delle prestazioni delle applicazioni WPF.” |
| Type: | Win32OwnProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
| mscorwks.dll |
| Total CPU: | 3.80539314% | |
| Kernel CPU: | 0.00105557% | |
| User CPU: | 3.80433757% | |
| CPU cycles: | 82,705,407/sec | |
| Context switches: | 16/sec | |
| Memory: | 9.61 MB | |
| PresentationFontCache.exe (main module) |
| Total CPU: | 0.00183494% | |
| Kernel CPU: | 0.00090647% | |
| User CPU: | 0.00092847% | |
| CPU cycles: | 43,171/sec | |
| Memory: | 48 KB | |
| ntdll.dll |
| Total CPU: | 0.00001010% | |
| Kernel CPU: | 0.00000220% | |
| User CPU: | 0.00000790% | |
| CPU cycles: | 88/sec | |
| Memory: | 1.66 MB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
39.00% |
|
| Windows 8.1 |
19.50% |
|
| Windows 7 Ultimate |
14.50% |
|
| Windows 8.1 Single Language |
7.00% |
|
| Windows 8.1 Pro |
6.50% |
|
| Windows 7 Professional |
6.50% |
|
| Windows 8.1 Pro with Media Center |
3.00% |
|
| Microsoft Windows XP |
2.00% |
|
| Windows 7 Home Basic |
1.00% |
|
| Windows 8.1 N |
0.50% |
|
| Windows 8.1 Enterprise Evaluation |
0.50% |
|
Distribution by country
United States installs about 46.23% of Microsoft® .NET Framework.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
20.58% |
|
| Hewlett-Packard |
19.75% |
|
| ASUS |
18.93% |
|
| Acer |
13.99% |
|
| Toshiba |
11.52% |
|
| Lenovo |
6.58% |
|
| Sony |
4.12% |
|
| GIGABYTE |
2.06% |
|
| Alienware |
1.23% |
|
| Samsung |
1.23% |
|
