Should I block it?

No, this file is 100% safe to run.

Additional versions

6.3.9600.16384 (winblue_rtm.130821-1623)	3.45%
6.2.9200.16384 (win8_rtm.120725-1247)	24.14%
6.1.7600.16385 (win7_rtm.090713-1255)	27.59%
6.1.7600.16385 (win7_rtm.090713-1255)	44.83%

Relationships

PE file structure

Show functions

Import table

api-ms-win-core-errorhandling-l1-1-0.dll

UnhandledExceptionFilter, GetLastError, SetUnhandledExceptionFilter

api-ms-win-core-file-l1-1-0.dll

FindFirstVolumeW, FindNextVolumeW, FindVolumeClose, GetDriveTypeW, CreateFileW, GetVolumeInformationW, GetVolumePathNameW

api-ms-win-core-handle-l1-1-0.dll

CloseHandle

api-ms-win-core-heap-l1-1-0.dll

HeapDestroy

api-ms-win-core-interlocked-l1-1-0.dll

InterlockedIncrement, InterlockedCompareExchange, InitializeSListHead, InterlockedExchange, InterlockedDecrement, InterlockedPopEntrySList, InterlockedPushEntrySList

api-ms-win-core-io-l1-1-0.dll

DeviceIoControl

api-ms-win-core-libraryloader-l1-1-0.dll

GetProcAddress, GetModuleFileNameW, FreeLibrary, SizeofResource, LoadResource, LoadLibraryExW, LoadStringW, LoadLibraryExA, GetModuleHandleW

api-ms-win-core-localregistry-l1-1-0.dll

RegEnumValueW, RegQueryInfoKeyW, RegSetValueExW, RegDeleteValueW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey, RegEnumKeyExW

api-ms-win-core-memory-l1-1-0.dll

VirtualProtect, VirtualAlloc, VirtualQuery

api-ms-win-core-misc-l1-1-0.dll

Sleep, lstrlenW, lstrcmpiW, LocalFree, lstrlenA, lstrcpynW

api-ms-win-core-processthreads-l1-1-0.dll

OpenThreadToken, CreateThread, GetCurrentThreadId, TerminateProcess, GetCurrentProcess, GetCurrentProcessId, OpenProcessToken

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar

api-ms-win-core-synch-l1-1-0.dll

SetEvent, CancelWaitableTimer, SetWaitableTimer, InitializeCriticalSectionAndSpinCount, CreateEventW, DeleteCriticalSection, InitializeCriticalSection, WaitForSingleObject, ResetEvent, EnterCriticalSection, LeaveCriticalSection

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime, GetTickCount, GetSystemDirectoryW, GetSystemInfo, GetVersionExW

api-ms-win-security-base-l1-1-0.dll

AdjustTokenPrivileges, DuplicateTokenEx, GetTokenInformation, InitializeSecurityDescriptor, CreateWellKnownSid, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, SetSecurityDescriptorDacl, CheckTokenMembership

api-ms-win-service-core-l1-1-0.dll

RegisterServiceCtrlHandlerExW, SetServiceStatus

api-ms-win-service-management-l1-1-0.dll

OpenServiceW, DeleteService, OpenSCManagerW, CreateServiceW, CloseServiceHandle

api-ms-win-service-management-l2-1-0.dll

ChangeServiceConfig2W

kernel32.dll

GetDiskFreeSpaceW, GetLocalTime, GetFileInformationByHandle, ReadFile, RegDeleteTreeW, MoveFileExW, GetFileAttributesW, DeleteFileW, CreateDirectoryW, ExpandEnvironmentStringsW, SetLastError, FindClose, FindNextFileW, FindFirstFileW, GetCurrentThread, TlsAlloc, TlsGetValue, RegQueryValueExW, TlsSetValue, TlsFree, FormatMessageW, DelayLoadFailureHook, GetVolumeNameForVolumeMountPointW, FindResourceW, GetVolumePathNamesForVolumeNameW, WaitForMultipleObjects, SleepConditionVariableCS, PowerClearRequest, WakeAllConditionVariable, InitializeConditionVariable, PowerSetRequest, PowerCreateRequest, lstrcpyW, LoadLibraryW, lstrcatW, CreateWaitableTimerW

msvcrt.dll

DllMain

ntdll.dll

RtlInsertElementGenericTableAvl, RtlDeleteElementGenericTableAvl, RtlEnumerateGenericTableAvl, RtlInitializeGenericTableAvl, RtlInitializeBitMap, RtlSetBits, NtWaitForSingleObject, NtFsControlFile, RtlFindSetBits, RtlFindClearBits, RtlFindClearRuns, RtlClearBits, RtlFindNextForwardRunClear, NtSetInformationThread, NtQueryInformationFile, NtOpenFile, NtQueryDirectoryFile, RtlInitUnicodeString, NtSetInformationProcess, RtlGetLastNtStatus, RtlNtStatusToDosError, EtwTraceMessage, RtlFreeHeap, RtlSetThreadErrorMode, RtlCaptureStackBackTrace, RtlAllocateHeap, EtwGetTraceEnableFlags, EtwGetTraceEnableLevel, EtwGetTraceLoggerHandle, EtwRegisterTraceGuidsW, EtwUnregisterTraceGuids, WinSqmSetDWORD

sxshared.dll

SxTracerShouldTrackFailure, SxTracerDebuggerBreak, SxTracerGetThreadContextRetail

user32.dll

RegisterDeviceNotificationW, UnregisterDeviceNotification, CharPrevW, CharNextW

Export table

DllCanUnloadNow

DllGetClassObject

DllRegisterServer

DllUnregisterServer

ServiceMain

defragsvc.dll

Microsoft\Disk Defragmenter by Microsoft

Remove defragsvc.dll

Version:	6.1.7600.16385 (win7_rtm.090713-1255)
MD5:	3cec7631a84943677aa8fa8ee5b6b43d
SHA1:	1a0f76793cd258b05224a94e7ee2143a9dcb8506
SHA256:	32061dac9ed6c1eba3b367b18d0e965aeec2df635dcf794ec39d086d32503ac5

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is defragsvc.dll?

Disk Defragmenter is a utility in Microsoft Windows designed to increase access speed by rearranging files stored on a disk to occupy contiguous storage locations, a technique called defragmentation. Defragmenting a disk minimizes head travel, which reduces the time it takes to read files from and write files to the disk. Beginning with Windows XP, Disk Defragmenter also reduces system startup times.

About defragsvc.dll (from Microsoft)

“Disk Defragmenter consolidates fragmented files and folders on your computer's hard disk, so that each occupies a single, contiguous space on the volume As a result, your system can gain access to y”

Details

File name:	defragsvc.dll
Publisher:	Microsoft Corporation
Product name:	Microsoft\Disk Defragmenter
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\defragsvc.dll
Original name:	defragsvc.dll.mui
File version:	6.1.7600.16385 (win7_rtm.090713-1255)
Product version:	6.1.7600.16385
Size:	284.5 KB (291,328 bytes)
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No