Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

9.07.0613.0 50.00%
9.07.0613.0 50.00%
(Note, Microsoft Corporation publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegCloseKey, RegQueryInfoKeyW, RegQueryValueExW, RegDeleteValueW, RegCreateKeyExW, RegSetValueExW, RegOpenKeyExW, RegEnumKeyExW, RegDeleteKeyW
gdi32.dll
GetStockObject, GetDeviceCaps, CreateFontIndirectW, TranslateCharsetInfo, CreateCompatibleBitmap, CreateCompatibleDC, GetObjectW, DeleteObject, DeleteDC, SelectObject, BitBlt, CreateSolidBrush
kernel32.dll
MultiByteToWideChar, SetEvent, InitializeCriticalSection, FreeLibrary, lstrcmpiW, SizeofResource, LoadResource, FindResourceW, LoadLibraryExW, InterlockedDecrement, InterlockedIncrement, GetModuleHandleW, GetCurrentThreadId, DeleteCriticalSection, lstrcpynA, lstrcpynW, lstrlenW, GetVersionExW, CloseHandle, GetCurrentProcess, GetVersionExA, LeaveCriticalSection, GetModuleFileNameW, lstrcmpW, MulDiv, GlobalUnlock, GlobalLock, GlobalAlloc, GetVersion, SetLastError, EnterCriticalSection, CreateSemaphoreW, GetLastError, Sleep, RaiseException, IsValidCodePage, WideCharToMultiByte, IsValidLocale, GetUserDefaultLCID, GetACP, GetCommandLineW, HeapFree, GetProcessHeap, HeapAlloc, InterlockedCompareExchange, GetProcAddress, LoadLibraryA, IsProcessorFeaturePresent, VirtualFree, VirtualAlloc, InterlockedExchange, GetLocaleInfoA, GetThreadLocale, GetStartupInfoA, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, FlushInstructionCache
msvcr80.dll
DllMain
ole32.dll
CoTaskMemFree, CoTaskMemRealloc, OleUninitialize, CoTaskMemAlloc, StringFromGUID2, OleLockRunning, CoCreateInstance, CoGetClassObject, CLSIDFromProgID, CLSIDFromString, CreateStreamOnHGlobal, OleInitialize
user32.dll
RegisterWindowMessageA, CreateWindowExW, MessageBoxW, DeleteMenu, SetRect, IsMenu, GetSysColor, BeginPaint, FillRect, EndPaint, GetDC, ReleaseDC, IsChild, GetDlgItem, RedrawWindow, DestroyWindow, GetClassNameW, CharNextW, CreateAcceleratorTableW, ClientToScreen, GetParent, SetCapture, ReleaseCapture, InvalidateRect, InvalidateRgn, SetWindowLongW, GetClassInfoExW, LoadCursorW, RegisterClassExW, ShowWindow, CallWindowProcW, LoadAcceleratorsW, LoadMenuW, GetMessageW, TranslateMessage, DispatchMessageW, wsprintfW, LoadImageW, DefWindowProcW, GetMenuItemInfoW, RemoveMenu, GetMenuItemCount, AppendMenuW, GetFocus, GetDesktopWindow, GetKeyState, GetWindow, GetTopWindow, PostMessageW, MoveWindow, GetWindowTextLengthW, GetWindowTextW, SetWindowTextW, ScreenToClient, DestroyAcceleratorTable, DestroyMenu, CreatePopupMenu, GetWindowRect, GetWindowLongW, PtInRect, PeekMessageW, TrackPopupMenuEx, IsWindow, MapWindowPoints, MessageBeep, SetWindowPos, GetClientRect, LoadStringA, PostQuitMessage, SetFocus, IsWindowVisible, LoadStringW, CallNextHookEx, UnhookWindowsHookEx, SetWindowsHookExW, SendMessageW, RegisterWindowMessageW, FindWindowW, UnregisterClassA
wkwbl90.dll
WksSqmOnBroadcast, WksSqmEnd, WksSqmBegin, WksSqmRegWinMsg

WksWp.exe

Microsoft Works 9 by Microsoft Corporation (Signed)

Remove WksWp.exe
Version:   9.07.0613.0
MD5:   5c373483418d410c75bd3e53feec9070
SHA1:   938c14be0c0783aaa1edfc46dc8abe6bac453426
SHA256:   17044409aff6aff3820abb4d6868fccf7378f71c764a64e706e37cef04771ef6

Overview

wkswp.exe executes as a process with the local user's privileges typically within the context of its parent MSWorks.exe (by Microsoft). This is typically installed with the program Microsoft Works published by Microsoft Corporation. The file is digitally signed by Microsoft Corporation.

DetailsDetails

File name:wkswp.exe
Publisher:Microsoft® Corporation
Product name:Microsoft® Works 9
Description:Microsoft® Works Word Processor
Typical file path:C:\Program Files\microsoft works\wkswp.exe
File version:9.07.0613.0
Product version:9.07.0613.0
Size:677.34 KB (693,600 bytes)
Build date:6/13/2007 4:39 AM
Certificate
Issued to:Microsoft Corporation
Authority (CA):Microsoft Corporation
Effective date:Tuesday, April 4, 2006
Expiration date:Thursday, October 4, 2007
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 8.0
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
Microsoft Corporation
1% remove
Microsoft Works is an integrated package software that was produced by Microsoft. Works is smaller, less expensive, and has fewer features than Microsoft Office or other major office suites. Its core functionality includes a word processor, a spreadsheet and a database management system. Microsoft Works has built-in compatibility for the Microsoft Office document formats (DOC and XLS), including, but not limited to, the ability of the W...

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.01228576%
0.028634%
Kernel CPU:0.00360772%
0.013761%
User CPU:0.00867804%
0.014873%
Kernel CPU time:24,679 ms/min
100,923,805ms/min
CPU cycles:24,319,603/sec
17,470,203/sec
Memory
Private memory:13 MB
21.59 MB
Private (maximum):19.68 MB
Private (minimum):4.63 MB
Non-paged memory:13 MB
21.59 MB
Virtual memory:172.8 MB
140.96 MB
Virtual memory (peak):191.34 MB
169.69 MB
Working set:16.27 MB
18.61 MB
Working set (peak):19.8 MB
37.95 MB
Page faults:12,397/min
2,039/min
I/O
I/O read transfer:8.43 KB/sec
1.02 MB/min
I/O read operations:4/sec
343/min
I/O write transfer:900 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:22.88 KB/sec
448.09 KB/min
I/O other operations:167/sec
1,671/min
Resource allocations
Threads:4
12
Handles:290
600
GUI GDI count:262
103
GUI USER count:146
49

BehaviorsProcess properties

Integrety level:Medium
Platform:32-bit
Command line:"C:\Program Files\microsoft works\wkswp.exe" "C:\users\user\documents\a &p.wps"
Owner:User
Parent process:MSWorks.exe (by Microsoft)

ResourcesThreads

Averages
 
wkswp.exe (main module)
Total CPU:2.21427688%
0.272967%
Kernel CPU:1.17638163%
0.107585%
User CPU:1.03789525%
0.165382%
CPU cycles:43,817,866/sec
5,741,424/sec
Memory:672 KB
1.16 MB
RPCRT4.dll
Total CPU:0.00709395%
Kernel CPU:0.00709395%
User CPU:0.00000000%
CPU cycles:20,135/sec
Memory:780 KB
WkWbl90.dll
Total CPU:0.00677414%
Kernel CPU:0.00602146%
User CPU:0.00075268%
CPU cycles:89,666/sec
Memory:164 KB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows Vista Home Premium 50.00%
Windows 7 Home Premium 50.00%

Distribution by countryDistribution by country

United States installs about 100.00% of Microsoft® Works 9.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Toshiba 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE