trkwks.dll

Description: Distributed Link Tracking Client

Version: 10.0.19041.3636

Architecture: 64-bit

Operating System: Windows NT

SHA256: 8a22f1b8183159a361f98521c591a2de

File Size: 112.5 KB

Uploaded At: Dec. 1, 2025, 7:40 a.m.

Views: 3

Exported Functions

ServiceMain (Ordinal: 1, Address: 0xa1c0)
SvchostPushServiceGlobals (Ordinal: 2, Address: 0xa270)

Imported DLLs & Functions

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180015128)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x180015138)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180015158)
RaiseException (Address: 0x180015148)
SetLastError (Address: 0x180015160)
SetUnhandledExceptionFilter (Address: 0x180015150)
UnhandledExceptionFilter (Address: 0x180015168)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x1800151c8)
DeleteFileW (Address: 0x1800151a0)
FindFirstVolumeW (Address: 0x180015198)
FindNextVolumeW (Address: 0x180015188)
FindVolumeClose (Address: 0x1800151c0)
FlushFileBuffers (Address: 0x180015178)
GetDriveTypeW (Address: 0x1800151a8)
GetFileSize (Address: 0x1800151b8)
GetVolumeInformationW (Address: 0x1800151b0)
SetEndOfFile (Address: 0x180015190)
SetFilePointer (Address: 0x180015180)

api-ms-win-core-file-l2-1-0.dll

MoveFileExW (Address: 0x1800151e0)
ReadDirectoryChangesW (Address: 0x1800151d8)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1800151f0)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x180015200)
LocalFree (Address: 0x180015208)

api-ms-win-core-io-l1-1-0.dll

CancelIoEx (Address: 0x180015220)
DeviceIoControl (Address: 0x180015218)
GetOverlappedResult (Address: 0x180015228)

api-ms-win-core-localization-l1-2-0.dll

LCMapStringW (Address: 0x180015238)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x180015268)
GetCurrentProcess (Address: 0x180015280)
GetCurrentProcessId (Address: 0x180015288)
GetCurrentThread (Address: 0x180015248)
GetCurrentThreadId (Address: 0x180015278)
OpenProcessToken (Address: 0x180015258)
OpenThread (Address: 0x180015260)
OpenThreadToken (Address: 0x180015270)
TerminateProcess (Address: 0x180015250)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180015298)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1800152b8)
RegCreateKeyExW (Address: 0x1800152d0)
RegDeleteValueW (Address: 0x1800152b0)
RegOpenKeyExW (Address: 0x1800152c0)
RegQueryValueExW (Address: 0x1800152c8)
RegSetValueExW (Address: 0x1800152a8)

api-ms-win-core-string-l1-1-0.dll

WideCharToMultiByte (Address: 0x1800152e0)

api-ms-win-core-synch-l1-1-0.dll

CreateEventW (Address: 0x180015320)
DeleteCriticalSection (Address: 0x1800152f0)
EnterCriticalSection (Address: 0x180015318)
InitializeCriticalSection (Address: 0x1800152f8)
LeaveCriticalSection (Address: 0x180015310)
ResetEvent (Address: 0x180015300)
SetEvent (Address: 0x180015308)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x180015330)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTime (Address: 0x180015350)
GetSystemTimeAsFileTime (Address: 0x180015340)
GetTickCount (Address: 0x180015348)

api-ms-win-core-timezone-l1-1-0.dll

SystemTimeToFileTime (Address: 0x180015360)

api-ms-win-security-base-l1-1-0.dll

AccessCheck (Address: 0x1800153d0)
AddAccessAllowedAce (Address: 0x1800153a0)
AdjustTokenPrivileges (Address: 0x1800153b8)
AllocateAndInitializeSid (Address: 0x1800153a8)
AreAllAccessesGranted (Address: 0x180015388)
CheckTokenMembership (Address: 0x1800153e0)
FreeSid (Address: 0x180015398)
GetTokenInformation (Address: 0x180015380)
ImpersonateSelf (Address: 0x1800153c0)
InitializeAcl (Address: 0x1800153c8)
InitializeSecurityDescriptor (Address: 0x1800153d8)
MakeAbsoluteSD (Address: 0x1800153e8)
RevertToSelf (Address: 0x180015390)
SetSecurityDescriptorControl (Address: 0x1800153b0)
SetSecurityDescriptorDacl (Address: 0x1800153f0)
SetSecurityDescriptorGroup (Address: 0x180015378)
SetSecurityDescriptorOwner (Address: 0x180015370)
SetSecurityDescriptorSacl (Address: 0x1800153f8)

api-ms-win-service-core-l1-1-0.dll

RegisterServiceCtrlHandlerExW (Address: 0x180015410)
SetServiceStatus (Address: 0x180015408)

api-ms-win-service-private-l1-1-0.dll

I_ScRegisterDeviceNotification (Address: 0x180015428)
I_ScUnregisterDeviceNotification (Address: 0x180015420)

KERNEL32.dll

GetComputerNameW (Address: 0x180015048)
UnregisterWaitEx (Address: 0x180015040)

msvcrt.dll

__C_specific_handler (Address: 0x1800154a8)
_amsg_exit (Address: 0x180015440)
_callnewh (Address: 0x180015458)
_initterm (Address: 0x180015438)
_local_unwind (Address: 0x180015470)
_purecall (Address: 0x180015480)
_vsnwprintf (Address: 0x180015490)
_wcsicmp (Address: 0x1800154b0)
_wcsnicmp (Address: 0x180015460)
_XcptFilter (Address: 0x180015448)
free (Address: 0x180015450)
malloc (Address: 0x1800154a0)
mbstowcs_s (Address: 0x180015478)
memcpy (Address: 0x180015498)
memset (Address: 0x1800154b8)
wcschr (Address: 0x180015488)
wcsncmp (Address: 0x180015468)

ntdll.dll

NtAcceptConnectPort (Address: 0x180015570)
NtCancelTimer (Address: 0x1800154f0)
NtClearEvent (Address: 0x180015540)
NtClose (Address: 0x1800155f0)
NtCompleteConnectPort (Address: 0x180015568)
NtConnectPort (Address: 0x180015550)
NtCreateFile (Address: 0x180015530)
NtCreateTimer (Address: 0x1800154c8)
NtCreateWaitablePort (Address: 0x180015580)
NtFsControlFile (Address: 0x1800155e0)
NtOpenEvent (Address: 0x180015578)
NtOpenFile (Address: 0x1800154d8)
NtQueryDirectoryFile (Address: 0x1800155f8)
NtQueryInformationFile (Address: 0x1800154e0)
NtQueryVolumeInformationFile (Address: 0x1800155e8)
NtReadFile (Address: 0x1800155a0)
NtReplyPort (Address: 0x180015558)
NtReplyWaitReceivePortEx (Address: 0x180015560)
NtSetEvent (Address: 0x180015548)
NtSetTimer (Address: 0x1800154e8)
NtSetVolumeInformationFile (Address: 0x1800154d0)
NtWaitForSingleObject (Address: 0x180015598)
NtWriteFile (Address: 0x180015590)
RtlCaptureContext (Address: 0x180015508)
RtlCreateSystemVolumeInformationFolder (Address: 0x1800155b8)
RtlDeregisterWaitEx (Address: 0x1800155c8)
RtlDosPathNameToNtPathName_U (Address: 0x1800155c0)
RtlDowncaseUnicodeString (Address: 0x180015518)
RtlFreeHeap (Address: 0x1800155a8)
RtlFreeUnicodeString (Address: 0x1800155b0)
RtlInitString (Address: 0x180015528)
RtlInitUnicodeString (Address: 0x180015588)
RtlLookupFunctionEntry (Address: 0x180015500)
RtlNtStatusToDosError (Address: 0x1800155d0)
RtlOemStringToUnicodeString (Address: 0x180015520)
RtlRegisterWait (Address: 0x1800155d8)
RtlSetThreadErrorMode (Address: 0x180015538)
RtlUnicodeStringToOemString (Address: 0x180015510)
RtlVirtualUnwind (Address: 0x1800154f8)

RPCRT4.dll

I_RpcBindingInqTransportType (Address: 0x180015070)
Ndr64AsyncServerCallAll (Address: 0x1800150b0)
NdrAsyncServerCall (Address: 0x1800150c0)
NdrClientCall3 (Address: 0x180015100)
NdrServerCall2 (Address: 0x1800150a8)
NdrServerCallAll (Address: 0x1800150b8)
RpcAsyncCompleteCall (Address: 0x180015058)
RpcBindingFree (Address: 0x180015118)
RpcBindingFromStringBindingW (Address: 0x1800150e8)
RpcBindingToStringBindingW (Address: 0x180015088)
RpcBindingVectorFree (Address: 0x1800150e0)
RpcCancelThread (Address: 0x1800150d0)
RpcEpRegisterW (Address: 0x180015098)
RpcEpUnregister (Address: 0x1800150f0)
RpcImpersonateClient (Address: 0x180015080)
RpcMgmtSetCancelTimeout (Address: 0x180015110)
RpcRevertToSelf (Address: 0x1800150a0)
RpcServerInqBindings (Address: 0x1800150d8)
RpcServerRegisterIfEx (Address: 0x1800150c8)
RpcServerUnregisterIf (Address: 0x1800150f8)
RpcServerUseProtseqEpW (Address: 0x180015078)
RpcStringBindingComposeW (Address: 0x180015108)
RpcStringBindingParseW (Address: 0x180015090)
RpcStringFreeW (Address: 0x180015068)
UuidCreate (Address: 0x180015060)