Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

4.0.30319.18408 built by: FX451RTMGREL 1.01%
4.0.30319.18408 built by: FX451RTMGREL 0.25%
4.0.30319.1014 built by: RTMGDR 4.80%
4.0.30319.1 built by: RTMRel 76.52%
4.0.30319.1 built by: RTMRel 7.83%
4.0.30319.1 built by: RTMRel 0.76%
4.0.30319.1 built by: RTMRel 0.51%
4.0.30319.1 built by: RTMRel 0.25%
4.0.30319.1 built by: RTMRel 0.25%
4.0.30319.1 built by: RTMRel 7.32%
4.0.30128.1 built by: RC1Rel 0.25%
4.0.21006.1 built by: B2Rel 0.25%

Relationships

Parent process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
TraceEvent, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, RegisterServiceCtrlHandlerExW, SetServiceStatus, StartServiceCtrlDispatcherW, RegNotifyChangeKeyValue, RegCloseKey, RegQueryInfoKeyW, RegQueryValueExW, RegOpenKeyExW, AccessCheck, MapGenericMask, GetSecurityInfo, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, SetEntriesInAclW, GetSidSubAuthority, GetSidSubAuthorityCount, GetTokenInformation, OpenProcessToken, OpenThreadToken, CopySid, GetLengthSid, ConvertSidToStringSidW, EqualSid, CreateWellKnownSid, RegEnumValueW, EventWrite, EventRegister, EventUnregister
kernel32.dll
GetSystemWindowsDirectoryW, LocalAlloc, FindClose, FindFirstFileW, SetLastError, GetModuleHandleExW, GetLocaleInfoW, GetSystemInfo, OutputDebugStringA, WideCharToMultiByte, MultiByteToWideChar, CompareStringW, LCMapStringW, ReadFile, GetFileInformationByHandle, ResetEvent, SetEvent, WaitForSingleObjectEx, CreateEventW, IsProcessorFeaturePresent, VirtualQuery, VirtualAlloc, GetVersion, GetExitCodeThread, WaitForMultipleObjectsEx, CreateThread, WaitForSingleObject, FindFirstChangeNotificationW, FindCloseChangeNotification, Sleep, GlobalMemoryStatusEx, QueueUserWorkItem, GetVersionExW, GetModuleHandleW, GetProcAddress, WriteFile, GetLastError, CreateFileW, SetErrorMode, RtlCaptureStackBackTrace, InterlockedExchange, InterlockedCompareExchange, HeapSetInformation, EncodePointer, DecodePointer, SetUnhandledExceptionFilter, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, IsDebuggerPresent, RaiseException, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, CloseHandle, InterlockedIncrement, InterlockedDecrement, LocalFree, GetCurrentThread, CreateFileMappingW, MapViewOfFileEx, UnmapViewOfFile, GetTickCount64
msvcp110_clr0400.dll
DllMain
msvcr100_clr0400.dll
DllMain
msvcr110_clr0400.dll
DllMain
rpcrt4.dll
RpcImpersonateClient, RpcServerUseProtseqEpW, RpcServerRegisterIfEx, RpcServerUnregisterIfEx, RpcStringFreeW, UuidToStringW, UuidCreate, NdrAsyncServerCall, RpcAsyncCompleteCall, RpcMgmtStopServerListening, RpcServerListen, RpcRevertToSelf
shell32.dll
SHGetFolderPathW

wpffontcache_v0400.exe

Microsoft .NET Framework by Microsoft Corporation (Signed)

Remove wpffontcache_v0400.exe
Version:   4.0.30319.1 built by: RTMRel
MD5:   b800eec15851597405784126c407188c
SHA1:   b1bcb13b0c27dca411e460089a2283da76a4d892
SHA256:   78fe6a9cbfc2c10db88d5d8616dbfd848849630907906d06199c14dc4f6c152d

Overview

wpffontcache_v0400.exe runs as a service under the name Windows Presentation Foundation Font Cache 4.0.0.0 (WPFFontCache_v0400) with extensive SYSTEM privileges (full administrator access). The file is digitally signed by Microsoft Corporation.

DetailsDetails

File name:wpffontcache_v0400.exe
Publisher:Microsoft Corporation
Product name:Microsoft® .NET Framework
Description:wpffontcache_v0400.exe
Typical file path:C:\windows\microsoft.net\framework\v4.0.30319\wpf\wpffontcache_v0400.exe
Original name:wpffontcache_v0400.exe.mui
File version:4.0.30319.1 built by: RTMRel
Product version:4.0.30319.1
Size:737.16 KB (754,856 bytes)
Build date:4/17/2013 1:42 AM
Certificate
Issued to:Microsoft Corporation
Authority (CA):Microsoft Corporation
Effective date:Monday, December 7, 2009
Expiration date:Monday, March 7, 2011
Digital DNA
Entropy:6.374822
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'WPFFontCache_v0400' (Windows Presentation Foundation Font Cache 4.0.0.0)
  • 'WPFFontCache_v0400'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00013597%
0.028634%
Kernel CPU:0.00009500%
0.013761%
User CPU:0.00004097%
0.014873%
Kernel CPU time:258 ms/min
100,923,805ms/min
CPU cycles:7,518/sec
17,470,203/sec
Memory
Private memory:1.65 MB
21.59 MB
Private (maximum):4.85 MB
Private (minimum):3.61 MB
Non-paged memory:1.65 MB
21.59 MB
Virtual memory:44.8 MB
140.96 MB
Virtual memory (peak):48.43 MB
169.69 MB
Working set:3.65 MB
18.61 MB
Working set (peak):7.96 MB
37.95 MB
Page faults:2,610/min
2,039/min
I/O
I/O read transfer:16 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:0 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:141 Bytes/sec
448.09 KB/min
I/O other operations:4/sec
1,671/min
Resource allocations
Threads:6
12
Handles:75
600
GUI GDI count:4
103
GUI USER count:1
49

BehaviorsProcess properties

Integrety level:Undefined
Platform:32-bit
Command line:C:\windows\microsoft.net\framework\v4.0.30319\wpf\wpffontcache_v0400.exe
Owner:SYSTEM
Windows Service
Service name:WPFFontCache_v0400
Display name:Windows Presentation Foundation Font Cache 4.0.0.0
Description:“Optimizes performance of Windows Presentation Foundation (WPF) applications by caching commonly used font data. WPF applications will start this service if it is not already running. It can be disabled, though doing so will degrade the performance of WPF applications.”
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 58.00%
Windows Vista Home Premium 31.00%
Windows Vista Home Basic 6.00%
Windows Vista Ultimate 2.50%
Windows Vista Business 2.50%

Distribution by countryDistribution by country

United States installs about 56.06% of Microsoft® .NET Framework.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 35.43%
Hewlett-Packard 14.17%
Toshiba 9.45%
American Megatrends 9.06%
Intel 6.30%
Gateway 4.72%
ASUS 3.94%
Sony 3.94%
Compaq 3.15%
Acer 2.76%
GIGABYTE 2.36%
Lenovo 2.36%
Sahara 1.18%
Samsung 0.79%
Packard Bell 0.39%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE