Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

3.0.6920.7903 built by: Win9Rel 3.75%
3.0.6920.7903 built by: Win9Rel 0.07%
3.0.6920.7512 built by: Win9Rel 0.18%
3.0.6920.7512 built by: Win9Rel 0.04%
3.0.6920.6387 built by: Win8RTM 1.34%
3.0.6920.6387 built by: Win8RTM 11.24%
3.0.6920.6266 built by: Win8RTM 0.07%
3.0.6920.6266 built by: Win8RTM 0.07%
3.0.6920.5011 built by: Win7SP1 38.09%
3.0.6920.4902 built by: NetFXw7 19.68%
3.0.6920.4902 built by: NetFXw7 3.43%
3.0.6920.4000 built by: QFE 5.62%
3.0.6920.4000 built by: QFE 1.41%
3.0.6920.1453 built by: NetFX 0.04%
3.0.6920.1453 built by: NetFX 0.60%
3.0.6920.1427 built by: SP 13.60%
3.0.6920.1427 built by: SP 0.11%
3.0.6920.1109 (lh_tools_devdiv_wpf.071009-1109) 0.64%
3.0.6920.1107 (lh_tools_devdiv_wpf.070904-1723) 0.04%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
mscoree.dll
DllMain

PresentationFontCache.exe

Microsoft .NET Framework by Microsoft Corporation (Signed)

Remove PresentationFontCache.exe
Version:   3.0.6920.4000 built by: QFE
MD5:   c7fbdd1ed42f82bfa35167a5c9803ea3
SHA1:   f540ab376ec7fde0d9324b4a89782d2ab2252e1d
SHA256:   372ff71070d5ece17342466a690737a0622e93c98dbed8172c49b0854f0012b7
This is a Windows system installed file with Windows File Protection (WFP) enabled.

Overview

PresentationFontCache.exe runs as a service under the name Cache tipi di carattere Windows Presentation Foundation 3.0.0.0 (FontCache3.0.0.0) with minimum LOCAL SERVICE privileges (predefined local account used by the service control manager) on the local PC and presents anonymous credentials on the network. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Microsoft Corporation.

DetailsDetails

File name:PresentationFontCache.exe
Publisher:Microsoft Corporation
Product name:Microsoft® .NET Framework
Description:PresentationFontCache.exe
Typical file path:C:\windows\microsoft.net\framework\v3.0\wpf\presentationfontcache.exe
File version:3.0.6920.4000 built by: QFE
Product version:3.0.6920.4000
Size:42.88 KB (43,904 bytes)
Certificate
Issued to:Microsoft Corporation
Authority (CA):Microsoft Corporation
Effective date:Wednesday, October 22, 2008
Expiration date:Friday, January 22, 2010
Digital DNA
Entropy:4.371954
File packed:No
Code language:Microsoft Visual C# / Basic .NET
.NET CLR:Yes
.NET NGENed:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'FontCache3.0.0.0' (Windows Presentation Foundation Font Cache 3.0.0.0)

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00111756%
0.028634%
Kernel CPU:0.00061996%
0.013761%
User CPU:0.00049760%
0.014873%
Kernel CPU time:218,058 ms/min
100,923,805ms/min
CPU cycles:18,449/sec
17,470,203/sec
Memory
Private memory:13.18 MB
21.59 MB
Private (maximum):11.27 MB
Private (minimum):7.11 MB
Non-paged memory:13.18 MB
21.59 MB
Virtual memory:124.74 MB
140.96 MB
Virtual memory (peak):129.95 MB
169.69 MB
Working set:8.59 MB
18.61 MB
Working set (peak):14.23 MB
37.95 MB
Page faults:5,342/min
2,039/min
I/O
I/O read transfer:3.82 KB/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:0 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:37 Bytes/sec
448.09 KB/min
I/O other operations:3/sec
1,671/min
Resource allocations
Threads:4
12
Handles:144
600

BehaviorsProcess properties

Integrety level:System
Platform:32-bit
Command line:C:\windows\microsoft.net\framework\v3.0\wpf\presentationfontcache.exe
Owner:LOCAL SERVICE
Windows Service
Service name:FontCache3.0.0.0
Display name:Cache tipi di carattere Windows Presentation Foundation 3.0.0.0
Description:“Consente di ottimizzare le prestazioni delle applicazioni Windows Presentation Foundation (WPF) tramite la memorizzazione nella cache dei dati relativi ai tipi di carattere di utilizzo comune. Il servizio verrà avviato dalle applicazioni WPF se non è già in esecuzione. È possibile disattivarlo, sebbene ciò comporti un peggioramento delle prestazioni delle applicazioni WPF.”
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
PresentationFontCache.exe (main module)
Total CPU:0.00135102%
0.272967%
Kernel CPU:0.00087821%
0.107585%
User CPU:0.00047281%
0.165382%
CPU cycles:30,380/sec
5,741,424/sec
Memory:48 KB
1.16 MB
mscorwks.dll
Total CPU:0.00003885%
Kernel CPU:0.00002128%
User CPU:0.00001757%
CPU cycles:312/sec
Memory:5.66 MB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 39.00%
Windows 8.1 19.50%
Windows 7 Ultimate 14.50%
Windows 8.1 Single Language 7.00%
Windows 8.1 Pro 6.50%
Windows 7 Professional 6.50%
Windows 8.1 Pro with Media Center 3.00%
Microsoft Windows XP 2.00%
Windows 7 Home Basic 1.00%
Windows 8.1 N 0.50%
Windows 8.1 Enterprise Evaluation 0.50%

Distribution by countryDistribution by country

United States installs about 46.23% of Microsoft® .NET Framework.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 20.58%
Hewlett-Packard 19.75%
ASUS 18.93%
Acer 13.99%
Toshiba 11.52%
Lenovo 6.58%
Sony 4.12%
GIGABYTE 2.06%
Alienware 1.23%
Samsung 1.23%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE