Windows 10 DLL File Information - wkssvc.dll

The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 10, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.

General Information

File Description:	Workstation Service DLL
File Version:	10.0.10130.0 (fbl_impressive.150522-2224)
Company:	Microsoft Corporation
Product Name:	Microsoft® Windows® Operating System
DLL popularity	Very Low - There is no any other DLL in system32 directory that is statically linked to this file.
File Size:	226 KB
Total Number of Exported Functions:	2
Total Number of Exported Functions With Names:	2

Section Headers

Name	Virtual Address	Raw Data Size	% of File	Characteristics	Section Contains...
.text	0x00001000	188,928 Bytes	81.5%	Read, Execute	Code
.data	0x00030000	2,560 Bytes	1.1%	Write, Read	Initialized Data
.idata	0x00032000	9,728 Bytes	4.2%	Read	Initialized Data
.didat	0x00035000	512 Bytes	0.2%	Write, Read	Initialized Data
.rsrc	0x00036000	19,456 Bytes	8.4%	Read	Initialized Data
.reloc	0x0003b000	9,728 Bytes	4.2%	Read, Discardable	Initialized Data

Static Linking

wkssvc.dll is statically linked to the following files:

msvcrt.dll
RPCRT4.dll
api-ms-win-core-errorhandling-l1-1-1.dll
netutils.dll
api-ms-win-core-heap-l2-1-0.dll
api-ms-win-security-base-l1-2-0.dll
api-ms-win-core-synch-l1-2-0.dll
bcrypt.dll
api-ms-win-core-sysinfo-l1-2-1.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-processthreads-l1-1-2.dll
api-ms-win-core-file-l1-2-1.dll
api-ms-win-core-threadpool-l1-2-0.dll
api-ms-win-core-registry-l1-1-0.dll
api-ms-win-core-heap-l1-2-0.dll
api-ms-win-core-rtlsupport-l1-2-0.dll
api-ms-win-service-core-l1-1-1.dll
USERENV.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-libraryloader-l1-2-0.dll
api-ms-win-security-activedirectoryclient-l1-1-0.dll
api-ms-win-core-kernel32-private-l1-1-1.dll
api-ms-win-security-lsalookup-l1-1-1.dll
api-ms-win-service-private-l1-1-1.dll
api-ms-win-core-kernel32-legacy-l1-1-1.dll
api-ms-win-core-threadpool-legacy-l1-1-0.dll
api-ms-win-core-string-obsolete-l1-1-0.dll
ntdll.dll
api-ms-win-eventing-classicprovider-l1-1-0.dll
api-ms-win-eventing-provider-l1-1-0.dll
api-ms-win-core-io-l1-1-1.dll
api-ms-win-core-delayload-l1-1-1.dll
api-ms-win-core-apiquery-l1-1-0.dll

This means that when wkssvc.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, wkssvc.dll won't be loaded.

General Resources Information

Resource Type	Number of Items	Total Size	% of File
Icons	0	0 Bytes	0.0%
Animated Icons	0	0 Bytes	0.0%
Cursors	0	0 Bytes	0.0%
Animated Cursors	0	0 Bytes	0.0%
Bitmaps	0	0 Bytes	0.0%
AVI Files	0	0 Bytes	0.0%
Dialog-Boxes	0	0 Bytes	0.0%
HTML Related Files	0	0 Bytes	0.0%
Menus	0	0 Bytes	0.0%
Strings	18	2,292 Bytes	1.0%
Type Libraries	0	0 Bytes	0.0%
Manifest	0	0 Bytes	0.0%
All Others	4	27,118 Bytes	11.7%
Total	22	29,410 Bytes	12.7%

Icons in this file

No icons found in this file

Cursors in this file

No cursors found in this file

Dialog-boxes list (up to 1000 dialogs)

No dialog resources in this file.

String resources in this dll (up to 1000 strings)

String ID	String Text
100	Workstation
101	Creates and maintains client network connections to remote servers using the SMB protocol. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
102	Microsoft Windows Network
103	Allow your machine to go to sleep when files opened remotely have not been written to.
104	Allow sleep with remote opens
105	A file has been opened across the network. File name: [%1] Process ID: [%2]
1000	Redirected Buffering Sub System
1001	Provides the framework for network mini-redirectors
1002	SMB MiniRedirector Wrapper and Engine
1003	Implements the framework for the SMB filesystem redirector
1004	SMB 1.x MiniRedirector
1005	Implements the SMB 1.x (CIFS) protocol. This protocol provides connectivity to network resources on pre-Windows Vista servers
1006	SMB 2.0 MiniRedirector
1007	Implements the SMB 2.0 protocol, which provides connectivity to network resources on Windows Vista and later servers
1008	DFS Namespace Client Driver
1009	Client driver for access to DFS Namespaces
1010	Client for Microsoft Networks
1011	Allows your computer to access resources on a Microsoft network.

COM Classes/Interfaces

There is no type library in this file with COM classes/interfaces information

Exported Functions List

The following functions are exported by this dll:

ServiceMain

SvchostPushServiceGlobals

Imported Functions List

The following functions are imported by this dll:

• msvcrt.dll:
  

  _CxxThrowException

  _XcptFilter

  __CxxFrameHandler

  __dllonexit

  _amsg_exit

  _callnewh

  _except_handler4_common

  _initterm

  _lock

  _onexit

  _unlock

  _vsnwprintf

  _wcsicmp

  _wcsnicmp

  free

  malloc

  memcmp

  memcpy

  memcpy_s

  memmove

  memset

  public: __thiscall exception::exception(char const * const &)

  public: __thiscall exception::exception(class exception const &)

  public: __thiscall exception::exception(void)

  public: virtual __thiscall exception::~exception(void)

  public: virtual __thiscall type_info::~type_info(void)

  public: virtual char const * __thiscall exception::what(void)const

  strchr

  tolower

  void __cdecl operator delete(void *)

  wcscat_s

  wcschr

  wcscpy_s

  wcsncpy_s

  wcsspn

  wcsstr

  wcstoul

• RPCRT4.dll:
  

  I_RpcBindingIsClientLocal	I_RpcExceptionFilter	I_RpcMapWin32Status	NdrAsyncClientCall2
  NdrAsyncServerCall	NdrClientCall4	NdrServerCall2	RpcAsyncAbortCall
  RpcAsyncCancelCall	RpcAsyncCompleteCall	RpcAsyncInitializeHandle	RpcBindingFree
  RpcBindingFromStringBindingW	RpcBindingServerFromClient	RpcBindingSetAuthInfoExW	RpcBindingSetOption
  RpcBindingToStringBindingW	RpcBindingVectorFree	RpcEpRegisterW	RpcEpResolveBinding
  RpcEpUnregister	RpcImpersonateClient	RpcMgmtInqServerPrincNameW	RpcMgmtSetComTimeout
  RpcRevertToSelf	RpcServerInqBindings	RpcServerInqCallAttributesW	RpcServerRegisterIfEx
  RpcServerTestCancel	RpcServerUnregisterIf	RpcServerUnregisterIfEx	RpcServerUseProtseqEpW
  RpcServerUseProtseqW	RpcStringBindingComposeW	RpcStringBindingParseW	RpcStringFreeW

• api-ms-win-core-errorhandling-l1-1-1.dll:
  

  KernelBase!GetLastError	KernelBase!SetUnhandledExceptionFilter	KernelBase!UnhandledExceptionFilter
  ntdll!RtlRestoreLastWin32Error

• netutils.dll:
  

  NetApiBufferAllocate	NetApiBufferFree	NetpwListCanonicalize	NetpwListTraverse
  NetpwNameCanonicalize	NetpwPathCanonicalize	NetpwPathType

• api-ms-win-core-heap-l2-1-0.dll:
  

  KernelBase!LocalAlloc	KernelBase!LocalFree	KernelBase!LocalLock	KernelBase!LocalReAlloc
  KernelBase!LocalUnlock

• api-ms-win-security-base-l1-2-0.dll:
  

  KernelBase!CheckTokenMembership

  KernelBase!CreateWellKnownSid

  KernelBase!RevertToSelf

• api-ms-win-core-synch-l1-2-0.dll:
  

  KernelBase!CreateEventW	KernelBase!OpenEventW	KernelBase!ResetEvent
  KernelBase!SetEvent	KernelBase!Sleep	KernelBase!WaitForMultipleObjectsEx
  KernelBase!WaitForSingleObject	ntdll!RtlDeleteCriticalSection	ntdll!RtlEnterCriticalSection
  ntdll!RtlInitializeCriticalSection	ntdll!RtlLeaveCriticalSection

• bcrypt.dll:
  

  BCryptCreateHash	BCryptDestroyHash	BCryptDestroyKey	BCryptEncrypt
  BCryptFinishHash	BCryptGenerateSymmetricKey	BCryptHashData

• api-ms-win-core-sysinfo-l1-2-1.dll:
  

  KernelBase!GetComputerNameExW	KernelBase!GetLocalTime	KernelBase!GetSystemTimeAsFileTime
  KernelBase!GetTickCount	KernelBase!GetTickCount64	KernelBase!GetVersion
  KernelBase!GetVersionExW	KernelBase!GlobalMemoryStatusEx

• api-ms-win-core-handle-l1-1-0.dll:
  

  KernelBase!CloseHandle

• api-ms-win-core-processthreads-l1-1-2.dll:
  

  KernelBase!OpenThreadToken	KernelBase!SetThreadToken	kernel32!CreateThread	kernel32!GetCurrentProcess
  kernel32!GetCurrentProcessId	kernel32!GetCurrentThread	kernel32!GetCurrentThreadId	kernel32!TerminateProcess

• api-ms-win-core-file-l1-2-1.dll:
  

  KernelBase!CreateFileW

  KernelBase!DefineDosDeviceW

  KernelBase!QueryDosDeviceW

• api-ms-win-core-threadpool-l1-2-0.dll:
  

  KernelBase!CreateThreadpoolCleanupGroup	KernelBase!CreateThreadpoolWait	KernelBase!TrySubmitThreadpoolCallback
  ntdll!TpReleaseCleanupGroup	ntdll!TpReleaseCleanupGroupMembers	ntdll!TpReleaseTimer
  ntdll!TpReleaseWait	ntdll!TpSetTimer	ntdll!TpSetWait
  ntdll!TpWaitForTimer	ntdll!TpWaitForWait

• api-ms-win-core-registry-l1-1-0.dll:
  

  KernelBase!RegCloseKey	KernelBase!RegGetValueW	KernelBase!RegNotifyChangeKeyValue
  KernelBase!RegOpenKeyExW	KernelBase!RegQueryInfoKeyW	KernelBase!RegQueryValueExW
  KernelBase!RegSetValueExW

• api-ms-win-core-heap-l1-2-0.dll:
  

  KernelBase!GetProcessHeap

  ntdll!RtlAllocateHeap

  ntdll!RtlFreeHeap

• api-ms-win-core-rtlsupport-l1-2-0.dll:
  

  ntdll!RtlCompareMemory

• api-ms-win-service-core-l1-1-1.dll:
  

  sechost!RegisterServiceCtrlHandlerExW

  sechost!SetServiceStatus

• USERENV.dll:
  

  RegisterGPNotification

  UnregisterGPNotification

• api-ms-win-core-profile-l1-1-0.dll:
  

  ntdll!RtlQueryPerformanceCounter

• api-ms-win-core-libraryloader-l1-2-0.dll:
  

  KernelBase!FreeLibrary	KernelBase!GetModuleFileNameW	KernelBase!GetModuleHandleExW	KernelBase!GetModuleHandleW
  KernelBase!GetProcAddress

• api-ms-win-security-activedirectoryclient-l1-1-0.dll:
  

  KernelBase!DsBindWithSpnExW	KernelBase!DsCrackNamesW	KernelBase!DsFreeDomainControllerInfoW
  KernelBase!DsFreeNameResultW	KernelBase!DsFreePasswordCredentials	KernelBase!DsGetDomainControllerInfoW
  KernelBase!DsMakePasswordCredentialsW	KernelBase!DsUnBindW

• api-ms-win-core-kernel32-private-l1-1-1.dll:
  

  kernel32!DosPathToSessionPathW	kernel32!EnumerateLocalComputerNamesW
  kernel32!RemoveLocalAlternateComputerNameW	kernel32!SetLocalPrimaryComputerNameW

• api-ms-win-security-lsalookup-l1-1-1.dll:
  

  sechost!LsaFreeMemory	sechost!LsaLookupClose	sechost!LsaLookupGetDomainInfo
  sechost!LsaLookupOpenLocalPolicy

• api-ms-win-service-private-l1-1-1.dll:
  

  sechost!I_ScSetServiceBitsW

• api-ms-win-core-kernel32-legacy-l1-1-1.dll:
  

  kernel32!AddLocalAlternateComputerNameW

  kernel32!DnsHostnameToComputerNameW

  kernel32!RegisterWaitForSingleObject

• api-ms-win-core-threadpool-legacy-l1-1-0.dll:
  

  KernelBase!UnregisterWaitEx

• api-ms-win-core-string-obsolete-l1-1-0.dll:
  

  kernel32!lstrcmpW

• ntdll.dll:
  

  CsrIdentifyAlertableThread	DbgPrint	NtAccessCheckAndAuditAlarm
  NtClose	NtCreateEvent	NtCreateFile
  NtDeviceIoControlFile	NtFsControlFile	NtOpenFile
  NtOpenProcessToken	NtOpenThreadToken	NtQueryInformationToken
  NtQueryVolumeInformationFile	RtlAcquireResourceExclusive	RtlAcquireResourceShared
  RtlAddAce	RtlAdjustPrivilege	RtlAppendUnicodeStringToString
  RtlCompareUnicodeString	RtlCopyLuid	RtlCopySid
  RtlCreateAcl	RtlCreateSecurityDescriptor	RtlDeleteElementGenericTable
  RtlDeleteResource	RtlDeleteSecurityObject	RtlDeregisterWait
  RtlDeregisterWaitEx	RtlEnumerateGenericTable	RtlGetNtProductType
  RtlInitString	RtlInitUnicodeString	RtlInitializeGenericTable
  RtlInitializeResource	RtlInsertElementGenericTable	RtlIntegerToUnicodeString
  RtlIpv4AddressToStringExW	RtlIpv4AddressToStringW	RtlIpv4StringToAddressW
  RtlIpv6AddressToStringExW	RtlIpv6AddressToStringW	RtlIpv6StringToAddressW
  RtlLengthSid	RtlLookupElementGenericTable	RtlMapSecurityErrorToNtStatus
  RtlNewSecurityObject	RtlNtStatusToDosError	RtlQueryRegistryValuesEx
  RtlRegisterWait	RtlReleaseResource	RtlRunDecodeUnicodeString
  RtlRunEncodeUnicodeString	RtlSetDaclSecurityDescriptor	RtlSetGroupSecurityDescriptor
  RtlSetOwnerSecurityDescriptor	RtlSetSaclSecurityDescriptor	WinSqmAddToAverageDWORD

• api-ms-win-eventing-classicprovider-l1-1-0.dll:
  

  ntdll!EtwGetTraceEnableFlags	ntdll!EtwGetTraceEnableLevel	ntdll!EtwGetTraceLoggerHandle	ntdll!EtwRegisterTraceGuidsW
  ntdll!EtwTraceMessage	ntdll!EtwUnregisterTraceGuids

• api-ms-win-eventing-provider-l1-1-0.dll:
  

  ntdll!EtwEventRegister

  ntdll!EtwEventUnregister

  ntdll!EtwEventWrite

• api-ms-win-core-io-l1-1-1.dll:
  

  kernel32!CreateIoCompletionPort

  kernel32!GetQueuedCompletionStatus

  kernel32!PostQueuedCompletionStatus

• api-ms-win-core-delayload-l1-1-1.dll:
  

  KernelBase!DelayLoadFailureHook

  KernelBase!ResolveDelayLoadedAPI

• api-ms-win-core-apiquery-l1-1-0.dll:
  

  ntdll!ApiSetQueryApiSetPresence