Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

4.0.30319.18408 built by: FX451RTMGREL 1.01%
4.0.30319.18408 built by: FX451RTMGREL 0.25%
4.0.30319.1014 built by: RTMGDR 4.80%
4.0.30319.1 built by: RTMRel 76.52%
4.0.30319.1 built by: RTMRel 7.83%
4.0.30319.1 built by: RTMRel 0.76%
4.0.30319.1 built by: RTMRel 0.51%
4.0.30319.1 built by: RTMRel 0.25%
4.0.30319.1 built by: RTMRel 0.25%
4.0.30319.1 built by: RTMRel 7.32%
4.0.30128.1 built by: RC1Rel 0.25%
4.0.21006.1 built by: B2Rel 0.25%

Relationships

Parent process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
TraceEvent, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, RegisterServiceCtrlHandlerExW, SetServiceStatus, StartServiceCtrlDispatcherW, RegNotifyChangeKeyValue, RegCloseKey, RegQueryInfoKeyW, RegQueryValueExW, RegOpenKeyExW, AccessCheck, MapGenericMask, GetSecurityInfo, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, SetEntriesInAclW, GetSidSubAuthority, GetSidSubAuthorityCount, GetTokenInformation, OpenProcessToken, OpenThreadToken, CopySid, GetLengthSid, ConvertSidToStringSidW, EqualSid, CreateWellKnownSid, RegEnumValueW, EventWrite, EventRegister, EventUnregister
kernel32.dll
GetSystemWindowsDirectoryW, LocalAlloc, FindClose, FindFirstFileW, SetLastError, GetModuleHandleExW, GetLocaleInfoW, GetSystemInfo, OutputDebugStringA, WideCharToMultiByte, MultiByteToWideChar, CompareStringW, LCMapStringW, ReadFile, GetFileInformationByHandle, ResetEvent, SetEvent, WaitForSingleObjectEx, CreateEventW, IsProcessorFeaturePresent, VirtualQuery, VirtualAlloc, GetVersion, GetExitCodeThread, WaitForMultipleObjectsEx, CreateThread, WaitForSingleObject, FindFirstChangeNotificationW, FindCloseChangeNotification, Sleep, GlobalMemoryStatusEx, QueueUserWorkItem, GetVersionExW, GetModuleHandleW, GetProcAddress, WriteFile, GetLastError, CreateFileW, SetErrorMode, RtlCaptureStackBackTrace, InterlockedExchange, InterlockedCompareExchange, HeapSetInformation, EncodePointer, DecodePointer, SetUnhandledExceptionFilter, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, IsDebuggerPresent, RaiseException, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, CloseHandle, InterlockedIncrement, InterlockedDecrement, LocalFree, GetCurrentThread, CreateFileMappingW, MapViewOfFileEx, UnmapViewOfFile, GetTickCount64
msvcp110_clr0400.dll
DllMain
msvcr100_clr0400.dll
DllMain
msvcr110_clr0400.dll
DllMain
rpcrt4.dll
RpcImpersonateClient, RpcServerUseProtseqEpW, RpcServerRegisterIfEx, RpcServerUnregisterIfEx, RpcStringFreeW, UuidToStringW, UuidCreate, NdrAsyncServerCall, RpcAsyncCompleteCall, RpcMgmtStopServerListening, RpcServerListen, RpcRevertToSelf
shell32.dll
SHGetFolderPathW

wpffontcache_v0400.exe

Microsoft .NET Framework by Microsoft Corporation (Signed)

Remove wpffontcache_v0400.exe
Version:   4.0.30319.18408 built by: FX451RTMGREL
MD5:   f8d3544acbce9110362119f7c10d848e
SHA1:   8a1332ab8d2636eb73f926cd78a9c597ce945287

Overview

wpffontcache_v0400.exe runs as a service under the name Windows Presentation Foundation Font Cache 4.0.0.0 (WPFFontCache_v0400) with minimum LOCAL SERVICE privileges (predefined local account used by the service control manager) on the local PC and presents anonymous credentials on the network. The file is digitally signed by Microsoft Corporation.

DetailsDetails

File name:wpffontcache_v0400.exe
Publisher:Microsoft Corporation
Product name:Microsoft® .NET Framework
Description:wpffontcache_v0400.exe
Typical file path:C:\windows\microsoft.net\framework\v4.0.30319\wpf\wpffontcache_v0400.exe
Original name:wpffontcache_v0400.exe.mui
File version:4.0.30319.18408 built by: FX451RTMGREL
Product version:4.0.30319.18408
Size:752.12 KB (770,168 bytes)
Build date:9/11/2013 11:15 PM
Certificate
Issued to:Microsoft Corporation
Authority (CA):Microsoft Corporation
Effective date:Monday, December 7, 2009
Expiration date:Monday, March 7, 2011
Digital DNA
Entropy:6.374822
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'WPFFontCache_v0400' (Windows Presentation Foundation Font Cache 4.0.0.0)
  • 'WPFFontCache_v0400'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00016816%
0.028634%
Kernel CPU:0.00006770%
0.013761%
User CPU:0.00010046%
0.014873%
Kernel CPU time:31 ms/min
100,923,805ms/min
Memory
Private memory:1.88 MB
21.59 MB
Private (maximum):5.36 MB
Private (minimum):5.34 MB
Non-paged memory:1.88 MB
21.59 MB
Virtual memory:50.53 MB
140.96 MB
Virtual memory (peak):52.53 MB
169.69 MB
Working set:5.34 MB
18.61 MB
Working set (peak):5.73 MB
37.95 MB
Resource allocations
Threads:5
12
Handles:81
600

BehaviorsProcess properties

Integrety level:System
Platform:32-bit
Command line:C:\windows\microsoft.net\framework\v4.0.30319\wpf\wpffontcache_v0400.exe
Owner:LOCAL SERVICE
Windows Service
Service name:WPFFontCache_v0400
Display name:Windows Presentation Foundation Font Cache 4.0.0.0
Description:“Optimizes performance of Windows Presentation Foundation (WPF) applications by caching commonly used font data. WPF applications will start this service if it is not already running. It can be disabled, though doing so will degrade the performance of WPF applications.”
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 58.00%
Windows Vista Home Premium 31.00%
Windows Vista Home Basic 6.00%
Windows Vista Ultimate 2.50%
Windows Vista Business 2.50%

Distribution by countryDistribution by country

United States installs about 56.06% of Microsoft® .NET Framework.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 35.43%
Hewlett-Packard 14.17%
Toshiba 9.45%
American Megatrends 9.06%
Intel 6.30%
Gateway 4.72%
ASUS 3.94%
Sony 3.94%
Compaq 3.15%
Acer 2.76%
GIGABYTE 2.36%
Lenovo 2.36%
Sahara 1.18%
Samsung 0.79%
Packard Bell 0.39%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE