Should I block it?

No, this file is 100% safe to run.

Additional versions

6.3.9600.16384 (winblue_rtm.130821-1623)	3.45%
6.2.9200.16384 (win8_rtm.120725-1247)	24.14%
6.1.7600.16385 (win7_rtm.090713-1255)	27.59%
6.1.7600.16385 (win7_rtm.090713-1255)	44.83%

Relationships

PE file structure

Show functions

Import table

api-ms-win-core-errorhandling-l1-1-0.dll

UnhandledExceptionFilter, GetLastError, SetUnhandledExceptionFilter

api-ms-win-core-file-l1-1-0.dll

FindFirstVolumeW, FindNextVolumeW, FindVolumeClose, GetDriveTypeW, CreateFileW, GetVolumeInformationW, GetVolumePathNameW

api-ms-win-core-handle-l1-1-0.dll

CloseHandle

api-ms-win-core-heap-l1-1-0.dll

HeapDestroy

api-ms-win-core-interlocked-l1-1-0.dll

InterlockedIncrement, InterlockedCompareExchange, InitializeSListHead, InterlockedExchange, InterlockedDecrement, InterlockedPopEntrySList, InterlockedPushEntrySList

api-ms-win-core-io-l1-1-0.dll

DeviceIoControl

api-ms-win-core-libraryloader-l1-1-0.dll

GetProcAddress, GetModuleFileNameW, FreeLibrary, SizeofResource, LoadResource, LoadLibraryExW, LoadStringW, LoadLibraryExA, GetModuleHandleW

api-ms-win-core-localregistry-l1-1-0.dll

RegEnumValueW, RegQueryInfoKeyW, RegSetValueExW, RegDeleteValueW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey, RegEnumKeyExW

api-ms-win-core-memory-l1-1-0.dll

VirtualProtect, VirtualAlloc, VirtualQuery

api-ms-win-core-misc-l1-1-0.dll

Sleep, lstrlenW, lstrcmpiW, LocalFree, lstrlenA, lstrcpynW

api-ms-win-core-processthreads-l1-1-0.dll

OpenThreadToken, CreateThread, GetCurrentThreadId, TerminateProcess, GetCurrentProcess, GetCurrentProcessId, OpenProcessToken

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar

api-ms-win-core-synch-l1-1-0.dll

SetEvent, CancelWaitableTimer, SetWaitableTimer, InitializeCriticalSectionAndSpinCount, CreateEventW, DeleteCriticalSection, InitializeCriticalSection, WaitForSingleObject, ResetEvent, EnterCriticalSection, LeaveCriticalSection

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime, GetTickCount, GetSystemDirectoryW, GetSystemInfo, GetVersionExW

api-ms-win-security-base-l1-1-0.dll

AdjustTokenPrivileges, DuplicateTokenEx, GetTokenInformation, InitializeSecurityDescriptor, CreateWellKnownSid, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, SetSecurityDescriptorDacl, CheckTokenMembership

api-ms-win-service-core-l1-1-0.dll

RegisterServiceCtrlHandlerExW, SetServiceStatus

api-ms-win-service-management-l1-1-0.dll

OpenServiceW, DeleteService, OpenSCManagerW, CreateServiceW, CloseServiceHandle

api-ms-win-service-management-l2-1-0.dll

ChangeServiceConfig2W

kernel32.dll

GetDiskFreeSpaceW, GetLocalTime, GetFileInformationByHandle, ReadFile, RegDeleteTreeW, MoveFileExW, GetFileAttributesW, DeleteFileW, CreateDirectoryW, ExpandEnvironmentStringsW, SetLastError, FindClose, FindNextFileW, FindFirstFileW, GetCurrentThread, TlsAlloc, TlsGetValue, RegQueryValueExW, TlsSetValue, TlsFree, FormatMessageW, DelayLoadFailureHook, GetVolumeNameForVolumeMountPointW, FindResourceW, GetVolumePathNamesForVolumeNameW, WaitForMultipleObjects, SleepConditionVariableCS, PowerClearRequest, WakeAllConditionVariable, InitializeConditionVariable, PowerSetRequest, PowerCreateRequest, lstrcpyW, LoadLibraryW, lstrcatW, CreateWaitableTimerW

msvcrt.dll

DllMain

ntdll.dll

RtlInsertElementGenericTableAvl, RtlDeleteElementGenericTableAvl, RtlEnumerateGenericTableAvl, RtlInitializeGenericTableAvl, RtlInitializeBitMap, RtlSetBits, NtWaitForSingleObject, NtFsControlFile, RtlFindSetBits, RtlFindClearBits, RtlFindClearRuns, RtlClearBits, RtlFindNextForwardRunClear, NtSetInformationThread, NtQueryInformationFile, NtOpenFile, NtQueryDirectoryFile, RtlInitUnicodeString, NtSetInformationProcess, RtlGetLastNtStatus, RtlNtStatusToDosError, EtwTraceMessage, RtlFreeHeap, RtlSetThreadErrorMode, RtlCaptureStackBackTrace, RtlAllocateHeap, EtwGetTraceEnableFlags, EtwGetTraceEnableLevel, EtwGetTraceLoggerHandle, EtwRegisterTraceGuidsW, EtwUnregisterTraceGuids, WinSqmSetDWORD

sxshared.dll

SxTracerShouldTrackFailure, SxTracerDebuggerBreak, SxTracerGetThreadContextRetail

user32.dll

RegisterDeviceNotificationW, UnregisterDeviceNotification, CharPrevW, CharNextW

Export table

DllCanUnloadNow

DllGetClassObject

DllRegisterServer

DllUnregisterServer

ServiceMain

defragsvc.dll

Microsoft\Disk Defragmenter by Microsoft

Remove defragsvc.dll

Version:	6.1.7600.16385 (win7_rtm.090713-1255)
MD5:	8d6e10a2d9a5eed59562d9b82cf804e1
SHA1:	3e008c4f36e0de5467d0edb635e61a83865aef30
SHA256:	888f9650f4e872ba8f4e0c27e38a6672a561042b17eba40e306a22357965b0ad

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is defragsvc.dll?

Disk Defragmenter is a utility in Microsoft Windows designed to increase access speed by rearranging files stored on a disk to occupy contiguous storage locations, a technique called defragmentation. Defragmenting a disk minimizes head travel, which reduces the time it takes to read files from and write files to the disk. Beginning with Windows XP, Disk Defragmenter also reduces system startup times.

About defragsvc.dll (from Microsoft)

“Disk Defragmenter consolidates fragmented files and folders on your computer's hard disk, so that each occupies a single, contiguous space on the volume As a result, your system can gain access to y”

Details

File name:	defragsvc.dll
Publisher:	Microsoft Corporation
Product name:	Microsoft\Disk Defragmenter
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\defragsvc.dll
Original name:	defragsvc.dll.mui
File version:	6.1.7600.16385 (win7_rtm.090713-1255)
Product version:	6.1.7600.16385
Size:	213.5 KB (218,624 bytes)
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No