Should I block it?

No, this file is 100% safe to run.

Relationships

Parent process

svchost.exe (Host Process for Windows Services by Microsoft Corporation)

Child process

splwow64.exe (Print driver host for 32bit applications by Microsoft)

Related files

PE file structure

Show functions

Import table

advapi32.dll

RegDeleteKeyW, RegCloseKey, RegCreateKeyExW, RegOpenKeyExW, RegSetValueExW, RegQueryInfoKeyW, RegEnumKeyExW, RegDeleteValueW

gdi32.dll

DeleteDC, CreateFontIndirectW, EnumFontFamiliesExW, EnumFontFamiliesW, DeleteObject, GetDeviceCaps, CreateICW

kernel32.dll

GetVersionExW, FreeLibrary, RaiseException, InitializeCriticalSection, DeleteCriticalSection, GetLastError, CloseHandle, WaitForSingleObject, InterlockedIncrement, InterlockedDecrement, SetThreadPriority, GetModuleFileNameW, Sleep, CreateThread, CreateEventW, SetEvent, GetCurrentProcess, GetCurrentThreadId, MultiByteToWideChar, LoadLibraryW, LoadResource, FindResourceW, LoadLibraryExW, TerminateThread, ResumeThread, GetCommandLineW, SetUnhandledExceptionFilter, IsDebuggerPresent, QueryPerformanceCounter, InterlockedCompareExchange, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetStartupInfoW, GetVersionExA, InterlockedExchange, GetACP, GetLocaleInfoA, GetThreadLocale, lstrlenW, MulDiv, GetProcessHeap, lstrcmpiW, LeaveCriticalSection, EnterCriticalSection, SizeofResource, UnhandledExceptionFilter, GetModuleHandleW, GetTickCount

msvcp80.dll

DllMain

msvcr80.dll

DllMain

ole32.dll

CoCreateInstance, CoUninitialize, CoTaskMemFree, CoRegisterClassObject, CoRevokeClassObject, CoInitialize, CoTaskMemRealloc, CoTaskMemAlloc, CoCreateFreeThreadedMarshaler, StringFromGUID2

user32.dll

ReleaseDC, GetDC, CharNextW, DispatchMessageW, TranslateMessage, GetMessageW, PostThreadMessageW, CharUpperW, DestroyWindow, DefWindowProcW, CreateWindowExW, RegisterClassW, UnregisterClassA

winspool.drv

EnumPrintersW

WkgdCach.exe

Microsoft Works 9 by Microsoft Corporation (Signed)

Remove WkgdCach.exe

Version:	9.07.0613.0
MD5:	387f4cc5cea5eb43f7df84a7e8568898
SHA1:	2f09dee01518f61b5312eb8001fa0754b96b5f91
SHA256:	750de90f5801f63bb63c7bf0c543a4f2c6bf832a3409ef4ee14db50d926f9bca

Overview

wkgdcach.exe executes as a process with the local user's privileges typically within the context of its parent svchost.exe (Host Process for Windows Services by Microsoft Corporation). The file is digitally signed by Microsoft Corporation.

Details

File name:	wkgdcach.exe
Publisher:	Microsoft® Corporation
Product name:	Microsoft® Works 9
Description:	Microsoft® Works Font Cache
Typical file path:	C:\Program Files\Microsoft Works\wkgdcach.exe
File version:	9.07.0613.0
Product version:	9.07.0613.0
Size:	89.34 KB (91,488 bytes)
Certificate
Issued to:	Microsoft Corporation
Authority (CA):	Microsoft Corporation
Effective date:	Tuesday, April 4, 2006
Expiration date:	Thursday, October 4, 2007
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 8.0
.NET CLR:	No

More details

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00087031%	0.028634%
Kernel CPU:	0.00066287%	0.013761%
User CPU:	0.00020745%	0.014873%
Kernel CPU time:	117 ms/min	100,923,805ms/min
CPU cycles:	16,426/sec	17,470,203/sec
Memory
Private memory:	2.76 MB	21.59 MB
Private (maximum):	7.29 MB
Private (minimum):	3.59 MB
Non-paged memory:	2.76 MB	21.59 MB
Virtual memory:	80.43 MB	140.96 MB
Virtual memory (peak):	85.87 MB	169.69 MB
Working set:	5.22 MB	18.61 MB
Working set (peak):	9.64 MB	37.95 MB
Page faults:	3,284/min	2,039/min
I/O
I/O read transfer:	46 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	0 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	14 Bytes/sec	448.09 KB/min
I/O other operations:	2/sec	1,671/min
Resource allocations
Threads:	4	12
Handles:	88	600
GUI GDI count:	9	103
GUI GDI peak:	12	142
GUI USER count:	4	49
GUI USER peak:	6	71

Process properties

Integrety level:	Medium
Platform:	32-bit
Command lines:	C:\progra~1\micros~2\wkgdcach.exe -embedding C:\progra~2\micros~2\wkgdcach.exe -embedding
Owner:	User
Parent process:	svchost.exe (Host Process for Windows Services by Microsoft Corporation)