Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.3.9600.16384 (winblue_rtm.130821-1623) 0.58%
6.2.9200.16384 (win8_rtm.120725-1247) 1.75%
6.2.9200.16384 (win8_rtm.120725-1247) 4.47%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.19%
6.2.8102.0 (winmain_win8m3.110823-1455) 0.19%
6.1.7600.16385 (win7_rtm.090713-1255) 14.56%
6.1.7600.16385 (win7_rtm.090713-1255) 22.91%
6.0.6000.16386 (vista_rtm.061101-2205) 0.39%
6.0.6000.16386 (vista_rtm.061101-2205) 0.39%
6.0.6000.16386 (vista_rtm.061101-2205) 2.91%
5.2.3790.3959 (srv03_sp2_rtm.070216-1710) 0.39%
5.1.2600.5512 (xpsp.080413-2108) 30.29%
5.1.2600.5512 (xpsp.080413-2108) 1.55%
5.1.2600.5512 (xpsp.080413-2108) 0.39%
5.1.2600.5512 (xpsp.080413-2108) 2.14%
5.1.2600.5512 (xpsp.080413-2108) 2.72%
5.1.2600.5512 (xpsp.080413-2108) 0.19%
5.1.2600.5512 (xpsp.080413-2108) 0.39%
5.1.2600.5512 (xpsp.080413-2108) 0.97%
5.1.2600.5512 (xpsp.080413-2108) 0.19%
5.1.2600.5512 (xpsp.080413-2108) 0.78%
5.1.2600.5512 (xpsp.080413-2108) 0.58%
5.1.2600.5512 (xpsp.080413-2108) 0.19%
5.1.2600.5512 (xpsp.080413-2108) 0.19%
5.1.2600.5512 (xpsp.080413-2108) 0.19%
View more

PE structurePE file structure
Show functions
Import table
advapi32.dll
LsaOpenPolicy, LsaFreeMemory, LsaClose, LsaQueryInformationPolicy, OpenThreadToken, GetTokenInformation, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, AccessCheck, AreAllAccessesGranted, MakeAbsoluteSD, RegisterServiceCtrlHandlerExW, SetServiceStatus, RegCreateKeyW, RegisterEventSourceW, ReportEventW, DeregisterEventSource, SetSecurityDescriptorDacl, SetSecurityDescriptorSacl, InitializeSecurityDescriptor, SetSecurityDescriptorControl, InitializeAcl, AddAccessDeniedAce, AddAccessAllowedAce, OpenProcessToken, LookupPrivilegeValueW, AdjustTokenPrivileges, RegQueryValueExW, RegSetValueExW, RegDeleteValueW, RegOpenKeyW, ImpersonateSelf, RevertToSelf, FreeSid, AllocateAndInitializeSid, CheckTokenMembership, RegCloseKey
api-ms-win-core-delayload-l1-1-1.dll
ResolveDelayLoadedAPI, DelayLoadFailureHook
api-ms-win-core-errorhandling-l1-1-0.dll
RaiseException, GetLastError, SetLastError, UnhandledExceptionFilter, SetUnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-1.dll
SetLastError, GetLastError, RaiseException, SetUnhandledExceptionFilter, UnhandledExceptionFilter
api-ms-win-core-file-l1-1-0.dll
FlushFileBuffers, GetFileSize, SetEndOfFile, SetFilePointer, DeleteFileW, CreateFileW, FindVolumeClose, FindFirstVolumeW, GetVolumeInformationW, GetDriveTypeW, FindNextVolumeW
api-ms-win-core-file-l1-2-0.dll
FlushFileBuffers, SetEndOfFile, FindVolumeClose, FindNextVolumeW, GetFileSize, GetDriveTypeW, DeleteFileW, CreateFileW, GetVolumeInformationW, FindFirstVolumeW, SetFilePointer
api-ms-win-core-file-l2-1-0.dll
ReadDirectoryChangesW, MoveFileExW
api-ms-win-core-handle-l1-1-0.dll
CloseHandle
api-ms-win-core-interlocked-l1-1-0.dll
InterlockedDecrement, InterlockedExchange, InterlockedCompareExchange, InterlockedIncrement
api-ms-win-core-interlocked-l1-2-0.dll
InterlockedCompareExchange, InterlockedIncrement, InterlockedDecrement, InterlockedExchange
api-ms-win-core-io-l1-1-0.dll
CancelIoEx, GetOverlappedResult, DeviceIoControl
api-ms-win-core-io-l1-1-1.dll
GetOverlappedResult, DeviceIoControl, CancelIoEx
api-ms-win-core-localization-l1-1-0.dll
LCMapStringW
api-ms-win-core-localization-l1-2-0.dll
LCMapStringW
api-ms-win-core-localregistry-l1-1-0.dll
RegCloseKey, RegOpenKeyExW, RegDeleteValueW, RegSetValueExW, RegQueryValueExW, RegCreateKeyExW
api-ms-win-core-misc-l1-1-0.dll
LocalAlloc, Sleep, LocalFree
api-ms-win-core-processthreads-l1-1-0.dll
GetCurrentThreadId, CreateThread, GetCurrentProcessId, TerminateProcess, GetCurrentThread, OpenThreadToken, OpenThread, OpenProcessToken, GetCurrentProcess
api-ms-win-core-processthreads-l1-1-1.dll
CreateThread, GetCurrentProcess, GetCurrentThreadId, GetCurrentProcessId, OpenThreadToken, GetCurrentThread, OpenProcessToken, OpenThread, TerminateProcess
api-ms-win-core-profile-l1-1-0.dll
QueryPerformanceCounter
api-ms-win-core-registry-l1-1-0.dll
RegOpenKeyExW, RegDeleteValueW, RegSetValueExW, RegCloseKey, RegCreateKeyExW, RegQueryValueExW
api-ms-win-core-string-l1-1-0.dll
WideCharToMultiByte
api-ms-win-core-synch-l1-1-0.dll
ResetEvent, CreateEventW, InitializeCriticalSection, DeleteCriticalSection, SetEvent, LeaveCriticalSection, EnterCriticalSection
api-ms-win-core-synch-l1-2-0.dll
SetEvent, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, ResetEvent, CreateEventW, Sleep, DeleteCriticalSection
api-ms-win-core-sysinfo-l1-1-0.dll
GetSystemTime, GetTickCount, GetSystemTimeAsFileTime, SystemTimeToFileTime
api-ms-win-core-sysinfo-l1-2-0.dll
GetSystemTimeAsFileTime, GetTickCount, GetSystemTime
api-ms-win-core-timezone-l1-1-0.dll
SystemTimeToFileTime
api-ms-win-security-base-l1-1-0.dll
RevertToSelf, GetTokenInformation, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, AccessCheck, AreAllAccessesGranted, MakeAbsoluteSD, SetSecurityDescriptorDacl, SetSecurityDescriptorSacl, InitializeSecurityDescriptor, SetSecurityDescriptorControl, InitializeAcl, AddAccessDeniedAce, AddAccessAllowedAce, AdjustTokenPrivileges, ImpersonateSelf, FreeSid, AllocateAndInitializeSid, CheckTokenMembership
api-ms-win-security-base-l1-2-0.dll
InitializeAcl, RevertToSelf, SetSecurityDescriptorOwner, AdjustTokenPrivileges, GetTokenInformation, AddAccessAllowedAce, InitializeSecurityDescriptor, FreeSid, AllocateAndInitializeSid, SetSecurityDescriptorGroup, SetSecurityDescriptorControl, SetSecurityDescriptorDacl, SetSecurityDescriptorSacl, CheckTokenMembership, MakeAbsoluteSD, AccessCheck, AreAllAccessesGranted, ImpersonateSelf
api-ms-win-service-core-l1-1-0.dll
RegisterServiceCtrlHandlerExW, SetServiceStatus
api-ms-win-service-core-l1-1-1.dll
SetServiceStatus, RegisterServiceCtrlHandlerExW
api-ms-win-service-private-l1-1-0.dll
I_ScRegisterDeviceNotification, I_ScUnregisterDeviceNotification
kernel32.dll
LoadLibraryExA, FreeLibrary, GetProcAddress, DelayLoadFailureHook, ReadDirectoryChangesW, UnregisterWait, MoveFileW, MoveFileExW, GetComputerNameW, GetCurrentThread, LCMapStringW, OpenThread, WideCharToMultiByte, DeviceIoControl, GetDriveTypeW, GetVolumeInformationW, LocalAlloc, LocalFree, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, InterlockedExchange, FindFirstVolumeW, FindNextVolumeW, FindVolumeClose, GetTickCount, CreateFileW, GetOverlappedResult, SetEvent, Sleep, CreateEventW, CloseHandle, DeleteFileW, ResetEvent, SetFilePointer, SetEndOfFile, GetFileSize, InterlockedDecrement, InterlockedIncrement, SetLastError, GetLastError, CancelIo, InterlockedCompareExchange, FlushFileBuffers, GetSystemTime, SystemTimeToFileTime, RaiseException, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, QueryPerformanceCounter, UnregisterWaitEx
msvcrt.dll
DllMain
netapi32.dll
NetApiBufferFree, DsGetDcNameW, NetShareEnum, NetApiBufferAllocate
ntdll.dll
NtFsControlFile, RtlCreateSystemVolumeInformationFolder, RtlFreeUnicodeString, RtlDosPathNameToNtPathName_U, NtQueryVolumeInformationFile, RtlDeregisterWaitEx, RtlRegisterWait, RtlNtStatusToDosError, NtClose, NtWaitForSingleObject, NtReadFile, NtWriteFile, NtCompleteConnectPort, NtAcceptConnectPort, NtReplyPort, NtReplyWaitReceivePortEx, NtConnectPort, RtlInitUnicodeString, NtSetEvent, NtClearEvent, NtOpenEvent, NtCreateWaitablePort, RtlSetThreadErrorMode, NtCreateFile, RtlUnicodeStringToOemString, RtlDowncaseUnicodeString, RtlOemStringToUnicodeString, RtlInitString, NtSetVolumeInformationFile, NtOpenFile, NtQueryInformationFile, NtCancelTimer, NtCreateTimer, NtSetTimer, NtQueryDirectoryFile, RtlCompareMemoryUlong, RtlFreeHeap
rpcrt4.dll
RpcServerUseProtseqEpW, I_RpcBindingInqTransportType, RpcCancelThread, RpcServerUnregisterIf, RpcBindingVectorFree, RpcStringBindingComposeW, RpcEpUnregister, RpcBindingSetAuthInfoW, RpcBindingFree, RpcServerRegisterAuthInfoW, RpcBindingToStringBindingW, RpcStringBindingParseW, RpcEpRegisterW, RpcServerRegisterIfEx, RpcServerInqBindings, RpcStringFreeW, RpcAsyncCompleteCall, NdrAsyncServerCall, NdrServerCall2, RpcMgmtSetCancelTimeout, RpcRevertToSelf, RpcBindingFromStringBindingW, RpcImpersonateClient, NdrClientCall2, UuidCreate
user32.dll
UnregisterDeviceNotification, RegisterDeviceNotificationW
Export table
ServiceMain
SvchostPushServiceGlobals

trkwks.dll

Distributed Link Tracking Client by Microsoft

Remove trkwks.dll
Version:   6.2.9200.16384 (win8_rtm.120725-1247)
MD5:   7b19ba44b3a44494dba300206faba998
SHA1:   43a0b62fe2f08fa752fd1341e89ff1f7834c0f40
SHA256:   3d69f17e4d25c0d72e8a575feb3763e600835abbe64f460a166eed27ba0878c0
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is trkwks.dll?

You can use the Distributed Link Tracking Server service and the Distributed Link Tracking Client service to track links to files on NTFS-formatted partitions. Distributed Link Tracking tracks links in scenarios where the link is made to a file on an NTFS volume, such as shell shortcuts and OLE links.

About trkwks.dll (from Microsoft)

“Distributed Link Tracking consists of a client service and a server service. The Distributed Link Tracking Server service runs exclusively on Windows Server-based domain controllers. It stores informa”

DetailsDetails

File name:trkwks.dll
Publisher:Microsoft Corporation
Product name:Distributed Link Tracking Client
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\trkwks.dll
Original name:trkwks.dll.mui
File version:6.2.9200.16384 (win8_rtm.120725-1247)
Product version:6.2.9200.16384
Size:72 KB (73,728 bytes)
Digital DNA
PE subsystem:Windows Console
File packed:No
Code language:Microsoft Visual C# / Basic .NET
.NET CLR:Yes
.NET NGENed:No
More details

BehaviorsBehaviors

Hosted services
Runs as a shared service under the Windows svcHost
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'
  • Shared name is 'TrkWks'

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 29.00%
Windows 7 Home Premium 26.00%
Windows 7 Ultimate N 25.50%
Windows 7 Professional 8.50%
Windows 8 Pro 4.00%
Windows 7 Home Basic 1.50%
Windows 7 Starter 1.50%
Windows Seven Black Edition 1.00%
Windows Vista Business 0.50%
Windows 8 Enterprise 0.50%
Windows Vista Home Premium 0.50%
Windows Vista™ Home Premium 0.50%
Microsoft Windows 7 Professional 0.50%
Windows Vista Ultimate 0.50%

Distribution by countryDistribution by country

United States installs about 41.34% of Distributed Link Tracking Client.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 18.69%
ASUS 16.82%
Acer 15.89%
Dell 14.95%
Toshiba 13.08%
Intel 5.61%
Lenovo 5.61%
NEC 3.74%
Samsung 2.80%
Alienware 0.93%
American Megatrends 0.93%
GIGABYTE 0.93%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE