home

mscorsvw.exe

Microsoft .NET Framework

Microsoft Corporation

The .NET Runtime Optimization Service is distributed with version 4.0 of the .NET Framework This assembly is part of version 4.0 of the .NET Framework . It runs as a separate (within the context of its own process) windows Service named “Microsoft .NET Framework NGEN v4.0.30319_X64”.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® .NET Framework

Description:
.NET Runtime Optimization Service

Version:
4.0.30319.19215 built by: FX45LDRSTAGE

MD5:
9490d83137889b1a91e76f2043ac700f

SHA-1:
d2874c3510796c0ceb30fda114b553a4b0a598de

SHA-256:
c5c5a52fffa8bc6a10a0e7b5e532e8c7f7c824d6d96ae473e8d794a6092634af

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
5/14/2024 5:55:44 PM UTC  (today)

File size:
121.2 KB (124,088 bytes)

Product version:
4.0.30319.19215

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
mscorsvw.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\windows\microsoft.net\framework64\v4.0.30319\mscorsvw.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
3/19/2013 11:05:36 PM

Valid to:
6/20/2014 12:05:36 AM

Subject:
CN=Microsoft Dynamic Code Publisher, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000BCFC339E48FC01F8A40001000000BC

File PE Metadata
Compilation timestamp:
5/21/2013 9:59:22 AM

OS version:
6.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
3072:KKI8B0FUES9CEbcraelQ/CbthEO7OWcVt1BTW0dTrp:R70FUz92P6/CbrOdy0pF

Entry address:
0x24B0

Entry point:
48, 83, EC, 28, E8, BF, F7, FF, FF, 48, 83, C4, 28, EB, 01, 90, 48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 30, 83, 64, 24, 20, 00, E8, 97, F7, FF, FF, 0F, B7, F0, 65, 48, 8B, 0C, 25, 30, 00, 00, 00, 48, 8B, 51, 08, 33, DB, 33, C0, F0, 48, 0F, B1, 15, 52, 7D, 01, 00, 0F, 85, 28, 16, 00, 00, 8B, 05, 4E, 7D, 01, 00, 83, F8, 01, 0F, 84, 2D, 16, 00, 00, 8B, 05, 3F, 7D, 01, 00, 85, C0, 0F, 85, 36, 16, 00, 00, C7, 05, 2D, 7D, 01, 00, 01, 00, 00, 00, 48, 8D, 15, A6, E0, 00, 00, 48, 8D, 0D, 7F, E0, 00...
 
[+]

Code size:
59.5 KB (60,928 bytes)

Service
Display name:
Microsoft .NET Framework NGEN v4.0.30319_X64

Service name:
clr_optimization_v4.0.30319_64

Description:
Microsoft .NET Framework NGEN

Type:
Win32OwnProcess


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.