home

mscorsvw.exe

Microsoft .NET Framework

Microsoft Corporation

The .NET Runtime Optimization Service is distributed with version 4.0 of the .NET Framework This assembly is part of version 4.0 of the .NET Framework .
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® .NET Framework

Description:
.NET Runtime Optimization Service

 
Part of the Windows Operating System

Version:
4.0.30319.33440 built by: FX45W81RTMREL

MD5:
358211fa9ade1f6de7fe08ef9513ca5c

SHA-1:
9d8bf2d4f2463c4b35944593084ca62dbf5d8873

SHA-256:
355b33ee8d905913a2839c67ee44364682aeac84d5c092328ff4b9d49935eb74

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/25/2024 7:55:42 AM UTC  (today)

File size:
121.2 KB (124,088 bytes)

Product version:
4.0.30319.33440

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
mscorsvw.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\windows\microsoft.net\framework64\v4.0.30319\mscorsvw.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
3/19/2013 3:05:36 PM

Valid to:
6/19/2014 3:05:36 PM

Subject:
CN=Microsoft Dynamic Code Publisher, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000BCFC339E48FC01F8A40001000000BC

File PE Metadata
Compilation timestamp:
8/5/2013 4:34:44 PM

OS version:
6.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
3072:2hgNjhu8G/6a5TbTDdrSjhsOFlOk9ohJyorIfr:8ehu8HGXTDdrSvlOSo/U

Entry address:
0x1E68

Entry point:
48, 83, EC, 28, E8, 6F, FC, FF, FF, 48, 83, C4, 28, EB, 01, 90, 48, 8B, C4, 48, 89, 58, 08, 48, 89, 70, 10, 57, 48, 83, EC, 30, 48, 83, 60, F0, 00, 83, 60, E8, 00, FF, 15, B9, E4, 00, 00, 0F, B7, F0, 65, 48, 8B, 0C, 25, 30, 00, 00, 00, 48, 8B, 51, 08, 33, DB, 33, C0, F0, 48, 0F, B1, 15, 64, 83, 01, 00, 0F, 85, 76, 1A, 00, 00, 8B, 05, 60, 83, 01, 00, 83, F8, 01, 0F, 84, 7B, 1A, 00, 00, 8B, 05, 51, 83, 01, 00, 85, C0, 0F, 85, 84, 1A, 00, 00, C7, 05, 3F, 83, 01, 00, 01, 00, 00, 00, 48, 8D, 15, 60, E6, 00, 00...
 
[+]

Entropy:
6.1625

Code size:
59.5 KB (60,928 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.