Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.3.9600.16384 (winblue_rtm.130821-1623) 0.58%
6.2.9200.16384 (win8_rtm.120725-1247) 1.75%
6.2.9200.16384 (win8_rtm.120725-1247) 4.47%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.19%
6.2.8102.0 (winmain_win8m3.110823-1455) 0.19%
6.1.7600.16385 (win7_rtm.090713-1255) 14.56%
6.1.7600.16385 (win7_rtm.090713-1255) 22.91%
6.0.6000.16386 (vista_rtm.061101-2205) 0.39%
6.0.6000.16386 (vista_rtm.061101-2205) 0.39%
6.0.6000.16386 (vista_rtm.061101-2205) 2.91%
5.2.3790.3959 (srv03_sp2_rtm.070216-1710) 0.39%
5.1.2600.5512 (xpsp.080413-2108) 30.29%
5.1.2600.5512 (xpsp.080413-2108) 1.55%
5.1.2600.5512 (xpsp.080413-2108) 0.39%
5.1.2600.5512 (xpsp.080413-2108) 2.14%
5.1.2600.5512 (xpsp.080413-2108) 2.72%
5.1.2600.5512 (xpsp.080413-2108) 0.19%
5.1.2600.5512 (xpsp.080413-2108) 0.39%
5.1.2600.5512 (xpsp.080413-2108) 0.97%
5.1.2600.5512 (xpsp.080413-2108) 0.19%
5.1.2600.5512 (xpsp.080413-2108) 0.78%
5.1.2600.5512 (xpsp.080413-2108) 0.58%
5.1.2600.5512 (xpsp.080413-2108) 0.19%
5.1.2600.5512 (xpsp.080413-2108) 0.19%
5.1.2600.5512 (xpsp.080413-2108) 0.19%
View more

PE structurePE file structure
Show functions
Import table
advapi32.dll
LsaOpenPolicy, LsaFreeMemory, LsaClose, LsaQueryInformationPolicy, OpenThreadToken, GetTokenInformation, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, AccessCheck, AreAllAccessesGranted, MakeAbsoluteSD, RegisterServiceCtrlHandlerExW, SetServiceStatus, RegCreateKeyW, RegisterEventSourceW, ReportEventW, DeregisterEventSource, SetSecurityDescriptorDacl, SetSecurityDescriptorSacl, InitializeSecurityDescriptor, SetSecurityDescriptorControl, InitializeAcl, AddAccessDeniedAce, AddAccessAllowedAce, OpenProcessToken, LookupPrivilegeValueW, AdjustTokenPrivileges, RegQueryValueExW, RegSetValueExW, RegDeleteValueW, RegOpenKeyW, ImpersonateSelf, RevertToSelf, FreeSid, AllocateAndInitializeSid, CheckTokenMembership, RegCloseKey
api-ms-win-core-delayload-l1-1-1.dll
ResolveDelayLoadedAPI, DelayLoadFailureHook
api-ms-win-core-errorhandling-l1-1-0.dll
RaiseException, GetLastError, SetLastError, UnhandledExceptionFilter, SetUnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-1.dll
SetLastError, GetLastError, RaiseException, SetUnhandledExceptionFilter, UnhandledExceptionFilter
api-ms-win-core-file-l1-1-0.dll
FlushFileBuffers, GetFileSize, SetEndOfFile, SetFilePointer, DeleteFileW, CreateFileW, FindVolumeClose, FindFirstVolumeW, GetVolumeInformationW, GetDriveTypeW, FindNextVolumeW
api-ms-win-core-file-l1-2-0.dll
FlushFileBuffers, SetEndOfFile, FindVolumeClose, FindNextVolumeW, GetFileSize, GetDriveTypeW, DeleteFileW, CreateFileW, GetVolumeInformationW, FindFirstVolumeW, SetFilePointer
api-ms-win-core-file-l2-1-0.dll
ReadDirectoryChangesW, MoveFileExW
api-ms-win-core-handle-l1-1-0.dll
CloseHandle
api-ms-win-core-interlocked-l1-1-0.dll
InterlockedDecrement, InterlockedExchange, InterlockedCompareExchange, InterlockedIncrement
api-ms-win-core-interlocked-l1-2-0.dll
InterlockedCompareExchange, InterlockedIncrement, InterlockedDecrement, InterlockedExchange
api-ms-win-core-io-l1-1-0.dll
CancelIoEx, GetOverlappedResult, DeviceIoControl
api-ms-win-core-io-l1-1-1.dll
GetOverlappedResult, DeviceIoControl, CancelIoEx
api-ms-win-core-localization-l1-1-0.dll
LCMapStringW
api-ms-win-core-localization-l1-2-0.dll
LCMapStringW
api-ms-win-core-localregistry-l1-1-0.dll
RegCloseKey, RegOpenKeyExW, RegDeleteValueW, RegSetValueExW, RegQueryValueExW, RegCreateKeyExW
api-ms-win-core-misc-l1-1-0.dll
LocalAlloc, Sleep, LocalFree
api-ms-win-core-processthreads-l1-1-0.dll
GetCurrentThreadId, CreateThread, GetCurrentProcessId, TerminateProcess, GetCurrentThread, OpenThreadToken, OpenThread, OpenProcessToken, GetCurrentProcess
api-ms-win-core-processthreads-l1-1-1.dll
CreateThread, GetCurrentProcess, GetCurrentThreadId, GetCurrentProcessId, OpenThreadToken, GetCurrentThread, OpenProcessToken, OpenThread, TerminateProcess
api-ms-win-core-profile-l1-1-0.dll
QueryPerformanceCounter
api-ms-win-core-registry-l1-1-0.dll
RegOpenKeyExW, RegDeleteValueW, RegSetValueExW, RegCloseKey, RegCreateKeyExW, RegQueryValueExW
api-ms-win-core-string-l1-1-0.dll
WideCharToMultiByte
api-ms-win-core-synch-l1-1-0.dll
ResetEvent, CreateEventW, InitializeCriticalSection, DeleteCriticalSection, SetEvent, LeaveCriticalSection, EnterCriticalSection
api-ms-win-core-synch-l1-2-0.dll
SetEvent, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, ResetEvent, CreateEventW, Sleep, DeleteCriticalSection
api-ms-win-core-sysinfo-l1-1-0.dll
GetSystemTime, GetTickCount, GetSystemTimeAsFileTime, SystemTimeToFileTime
api-ms-win-core-sysinfo-l1-2-0.dll
GetSystemTimeAsFileTime, GetTickCount, GetSystemTime
api-ms-win-core-timezone-l1-1-0.dll
SystemTimeToFileTime
api-ms-win-security-base-l1-1-0.dll
RevertToSelf, GetTokenInformation, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, AccessCheck, AreAllAccessesGranted, MakeAbsoluteSD, SetSecurityDescriptorDacl, SetSecurityDescriptorSacl, InitializeSecurityDescriptor, SetSecurityDescriptorControl, InitializeAcl, AddAccessDeniedAce, AddAccessAllowedAce, AdjustTokenPrivileges, ImpersonateSelf, FreeSid, AllocateAndInitializeSid, CheckTokenMembership
api-ms-win-security-base-l1-2-0.dll
InitializeAcl, RevertToSelf, SetSecurityDescriptorOwner, AdjustTokenPrivileges, GetTokenInformation, AddAccessAllowedAce, InitializeSecurityDescriptor, FreeSid, AllocateAndInitializeSid, SetSecurityDescriptorGroup, SetSecurityDescriptorControl, SetSecurityDescriptorDacl, SetSecurityDescriptorSacl, CheckTokenMembership, MakeAbsoluteSD, AccessCheck, AreAllAccessesGranted, ImpersonateSelf
api-ms-win-service-core-l1-1-0.dll
RegisterServiceCtrlHandlerExW, SetServiceStatus
api-ms-win-service-core-l1-1-1.dll
SetServiceStatus, RegisterServiceCtrlHandlerExW
api-ms-win-service-private-l1-1-0.dll
I_ScRegisterDeviceNotification, I_ScUnregisterDeviceNotification
kernel32.dll
LoadLibraryExA, FreeLibrary, GetProcAddress, DelayLoadFailureHook, ReadDirectoryChangesW, UnregisterWait, MoveFileW, MoveFileExW, GetComputerNameW, GetCurrentThread, LCMapStringW, OpenThread, WideCharToMultiByte, DeviceIoControl, GetDriveTypeW, GetVolumeInformationW, LocalAlloc, LocalFree, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, InterlockedExchange, FindFirstVolumeW, FindNextVolumeW, FindVolumeClose, GetTickCount, CreateFileW, GetOverlappedResult, SetEvent, Sleep, CreateEventW, CloseHandle, DeleteFileW, ResetEvent, SetFilePointer, SetEndOfFile, GetFileSize, InterlockedDecrement, InterlockedIncrement, SetLastError, GetLastError, CancelIo, InterlockedCompareExchange, FlushFileBuffers, GetSystemTime, SystemTimeToFileTime, RaiseException, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, QueryPerformanceCounter, UnregisterWaitEx
msvcrt.dll
DllMain
netapi32.dll
NetApiBufferFree, DsGetDcNameW, NetShareEnum, NetApiBufferAllocate
ntdll.dll
NtFsControlFile, RtlCreateSystemVolumeInformationFolder, RtlFreeUnicodeString, RtlDosPathNameToNtPathName_U, NtQueryVolumeInformationFile, RtlDeregisterWaitEx, RtlRegisterWait, RtlNtStatusToDosError, NtClose, NtWaitForSingleObject, NtReadFile, NtWriteFile, NtCompleteConnectPort, NtAcceptConnectPort, NtReplyPort, NtReplyWaitReceivePortEx, NtConnectPort, RtlInitUnicodeString, NtSetEvent, NtClearEvent, NtOpenEvent, NtCreateWaitablePort, RtlSetThreadErrorMode, NtCreateFile, RtlUnicodeStringToOemString, RtlDowncaseUnicodeString, RtlOemStringToUnicodeString, RtlInitString, NtSetVolumeInformationFile, NtOpenFile, NtQueryInformationFile, NtCancelTimer, NtCreateTimer, NtSetTimer, NtQueryDirectoryFile, RtlCompareMemoryUlong, RtlFreeHeap
rpcrt4.dll
RpcServerUseProtseqEpW, I_RpcBindingInqTransportType, RpcCancelThread, RpcServerUnregisterIf, RpcBindingVectorFree, RpcStringBindingComposeW, RpcEpUnregister, RpcBindingSetAuthInfoW, RpcBindingFree, RpcServerRegisterAuthInfoW, RpcBindingToStringBindingW, RpcStringBindingParseW, RpcEpRegisterW, RpcServerRegisterIfEx, RpcServerInqBindings, RpcStringFreeW, RpcAsyncCompleteCall, NdrAsyncServerCall, NdrServerCall2, RpcMgmtSetCancelTimeout, RpcRevertToSelf, RpcBindingFromStringBindingW, RpcImpersonateClient, NdrClientCall2, UuidCreate
user32.dll
UnregisterDeviceNotification, RegisterDeviceNotificationW
Export table
ServiceMain
SvchostPushServiceGlobals

trkwks.dll

Distributed Link Tracking Client by Microsoft

Remove trkwks.dll
Version:   5.1.2600.5512 (xpsp.080413-2108)
MD5:   cf25316a8e514fcc795d849b133da527
SHA1:   136c17c1d3fc39984af663516c5c20f57b75e25c
SHA256:   a34b1f675c884e59dc7b4d880d96a3784cf7e5d5e4353fb9c991379952458dce
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is trkwks.dll?

You can use the Distributed Link Tracking Server service and the Distributed Link Tracking Client service to track links to files on NTFS-formatted partitions. Distributed Link Tracking tracks links in scenarios where the link is made to a file on an NTFS volume, such as shell shortcuts and OLE links.

About trkwks.dll (from Microsoft)

“Distributed Link Tracking consists of a client service and a server service. The Distributed Link Tracking Server service runs exclusively on Windows Server-based domain controllers. It stores informa”

DetailsDetails

File name:trkwks.dll
Publisher:Microsoft Corporation
Product name:Distributed Link Tracking Client
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\trkwks.dll
Original name:trkwks.dll.mui
File version:5.1.2600.5512 (xpsp.080413-2108)
Product version:5.1.2600.5512
Size:88 KB (90,112 bytes)
Digital DNA
PE subsystem:Windows Console
File packed:No
Code language:Microsoft Visual C# / Basic .NET
.NET CLR:Yes
.NET NGENed:No
More details

BehaviorsBehaviors

Hosted services
Runs as a shared service under the Windows svcHost
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 29.00%
Windows 7 Home Premium 26.00%
Windows 7 Ultimate N 25.50%
Windows 7 Professional 8.50%
Windows 8 Pro 4.00%
Windows 7 Home Basic 1.50%
Windows 7 Starter 1.50%
Windows Seven Black Edition 1.00%
Windows Vista Business 0.50%
Windows 8 Enterprise 0.50%
Windows Vista Home Premium 0.50%
Windows Vista™ Home Premium 0.50%
Microsoft Windows 7 Professional 0.50%
Windows Vista Ultimate 0.50%

Distribution by countryDistribution by country

United States installs about 41.34% of Distributed Link Tracking Client.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 18.69%
ASUS 16.82%
Acer 15.89%
Dell 14.95%
Toshiba 13.08%
Intel 5.61%
Lenovo 5.61%
NEC 3.74%
Samsung 2.80%
Alienware 0.93%
American Megatrends 0.93%
GIGABYTE 0.93%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE