home

mscorsvw.exe

Microsoft .NET Framework

Microsoft Corporation

The .NET Runtime Optimization Service is distributed with version 4.0 of the .NET Framework This assembly is part of version 4.0 of the .NET Framework . It runs as a separate (within the context of its own process) windows Service named “Microsoft .NET Framework NGEN v4.0.30319_X86”.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® .NET Framework

Description:
.NET Runtime Optimization Service

Version:
4.0.30319.19462 built by: FX451RTMLDR

MD5:
6aff52706284951d4c29ab95fdd54ad2

SHA-1:
31d93cd2408b6e114135f95dbc304b0d65bf88a1

SHA-256:
b5b171ff306f0d06c153561e595911056529c11d1e1a6e2bc43e334b6632bab6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 10:23:46 PM UTC  (today)

File size:
138.2 KB (141,496 bytes)

Product version:
4.0.30319.19462

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
mscorsvw.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
3/19/2013 10:05:36 PM

Valid to:
6/19/2014 10:05:36 PM

Subject:
CN=Microsoft Dynamic Code Publisher, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000BCFC339E48FC01F8A40001000000BC

File PE Metadata
Compilation timestamp:
2/4/2014 12:49:11 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
3072:+6T5k9lBX/YeJhNMN4cVqf8Nd3JroSB9VyANFAMhglrBweiip28Y8PB85kDa:+6Te9lZJP2jVqf8NfJyQ6Pl1oipTDa

Entry address:
0x282A

Entry point:
E8, B1, F3, FF, FF, 6A, 14, 68, 58, 29, 40, 00, E8, E2, FC, FF, FF, 83, 65, E0, 00, E8, D6, F3, FF, FF, 0F, B7, D8, 83, 65, FC, 00, 64, A1, 18, 00, 00, 00, 8B, 50, 04, 33, FF, BE, 48, 41, 41, 00, 8B, CA, 33, C0, F0, 0F, B1, 0E, 85, C0, 0F, 85, 61, 15, 00, 00, 33, F6, 46, 39, 35, 4C, 41, 41, 00, 0F, 84, 64, 15, 00, 00, 83, 3D, 4C, 41, 41, 00, 00, 0F, 85, FA, 00, 00, 00, 89, 35, 4C, 41, 41, 00, 68, 54, 29, 40, 00, 68, 40, 29, 40, 00, E8, 84, F3, FF, FF, 59, 59, 85, C0, 0F, 85, 45, 15, 00, 00, 39, 35, 4C, 41...
 
[+]

Code size:
74 KB (75,776 bytes)

Service
Display name:
Microsoft .NET Framework NGEN v4.0.30319_X86

Service name:
clr_optimization_v4.0.30319_32

Description:
Microsoft .NET Framework NGEN

Type:
Win32OwnProcess


Scan mscorsvw.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.