Windows.Management.Workplace.dll

Description: Windows Runtime MdmPolicy DLL

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5848

Architecture: 32-bit

Operating System: Windows NT

SHA256: 5e6d72f3bf50e12052720e0f2ba7aa2c

File Size: 178.4 KB

Uploaded At: Dec. 1, 2025, 8:07 a.m.

Views: 19

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x9500)
  • DllGetActivationFactory (Ordinal: 2, Address: 0x94c0)
  • DllGetClassObject (Ordinal: 3, Address: 0x9540)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CoCreateFreeThreadedMarshaler (Address: 0x10027084)
  • CoCreateInstance (Address: 0x10027070)
  • CoMarshalInterface (Address: 0x10027080)
  • CoReleaseMarshalData (Address: 0x1002706c)
  • CoRevertToSelf (Address: 0x10027064)
  • CoTaskMemAlloc (Address: 0x10027068)
  • CoTaskMemFree (Address: 0x10027078)
  • CreateStreamOnHGlobal (Address: 0x1002707c)
  • StringFromGUID2 (Address: 0x10027074)
api-ms-win-core-com-l1-1-1.dll
  • RoGetAgileReference (Address: 0x1002708c)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
  • CStdStubBuffer2_Connect (Address: 0x10027098)
  • CStdStubBuffer2_CountRefs (Address: 0x100270e0)
  • CStdStubBuffer2_Disconnect (Address: 0x100270a8)
  • CStdStubBuffer2_QueryInterface (Address: 0x100270dc)
  • NdrProxyForwardingFunction3 (Address: 0x10027094)
  • NdrProxyForwardingFunction4 (Address: 0x100270b0)
  • NdrProxyForwardingFunction5 (Address: 0x100270bc)
  • ObjectStublessClient10 (Address: 0x100270cc)
  • ObjectStublessClient11 (Address: 0x100270b8)
  • ObjectStublessClient12 (Address: 0x100270a4)
  • ObjectStublessClient13 (Address: 0x100270c0)
  • ObjectStublessClient14 (Address: 0x1002709c)
  • ObjectStublessClient15 (Address: 0x100270b4)
  • ObjectStublessClient16 (Address: 0x100270d0)
  • ObjectStublessClient17 (Address: 0x100270c4)
  • ObjectStublessClient18 (Address: 0x100270ac)
  • ObjectStublessClient3 (Address: 0x100270d4)
  • ObjectStublessClient6 (Address: 0x100270c8)
  • ObjectStublessClient7 (Address: 0x100270a0)
  • ObjectStublessClient8 (Address: 0x100270e4)
  • ObjectStublessClient9 (Address: 0x100270d8)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x100270ec)
  • IsDebuggerPresent (Address: 0x100270f0)
  • OutputDebugStringW (Address: 0x100270f4)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x100270fc)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x10027104)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x10027114)
  • RaiseException (Address: 0x10027118)
  • SetLastError (Address: 0x10027110)
  • SetUnhandledExceptionFilter (Address: 0x1002711c)
  • UnhandledExceptionFilter (Address: 0x1002710c)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x10027124)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x10027130)
  • HeapAlloc (Address: 0x10027134)
  • HeapFree (Address: 0x1002712c)
api-ms-win-core-heap-l2-1-0.dll
  • LocalFree (Address: 0x1002713c)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x10027150)
  • GetModuleFileNameA (Address: 0x10027154)
  • GetModuleHandleExW (Address: 0x1002714c)
  • GetModuleHandleW (Address: 0x10027148)
  • GetProcAddress (Address: 0x10027144)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1002715c)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x1002716c)
  • GetCurrentProcessId (Address: 0x10027168)
  • GetCurrentThread (Address: 0x1002717c)
  • GetCurrentThreadId (Address: 0x10027170)
  • OpenProcessToken (Address: 0x10027178)
  • OpenThreadToken (Address: 0x10027164)
  • TerminateProcess (Address: 0x10027174)
api-ms-win-core-processthreads-l1-1-1.dll
  • OpenProcess (Address: 0x10027184)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1002718c)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x10027194)
  • RegCreateKeyExW (Address: 0x100271b4)
  • RegDeleteTreeW (Address: 0x100271a4)
  • RegEnumKeyExW (Address: 0x100271a8)
  • RegGetValueW (Address: 0x100271b8)
  • RegNotifyChangeKeyValue (Address: 0x100271a0)
  • RegOpenKeyExW (Address: 0x1002719c)
  • RegQueryInfoKeyW (Address: 0x100271ac)
  • RegQueryValueExW (Address: 0x10027198)
  • RegSetValueExW (Address: 0x100271b0)
api-ms-win-core-registry-l1-1-2.dll
  • RegQueryMultipleValuesW (Address: 0x100271c0)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x100271c8)
  • AcquireSRWLockShared (Address: 0x100271cc)
  • CreateEventW (Address: 0x100271d0)
  • CreateMutexExW (Address: 0x100271e8)
  • CreateSemaphoreExW (Address: 0x100271e4)
  • DeleteCriticalSection (Address: 0x100271f0)
  • EnterCriticalSection (Address: 0x100271f4)
  • InitializeCriticalSectionEx (Address: 0x100271ec)
  • InitializeSRWLock (Address: 0x100271dc)
  • LeaveCriticalSection (Address: 0x100271f8)
  • OpenSemaphoreW (Address: 0x10027200)
  • ReleaseMutex (Address: 0x1002720c)
  • ReleaseSemaphore (Address: 0x10027204)
  • ReleaseSRWLockExclusive (Address: 0x100271fc)
  • ReleaseSRWLockShared (Address: 0x100271d4)
  • ResetEvent (Address: 0x100271d8)
  • TryAcquireSRWLockShared (Address: 0x10027210)
  • WaitForSingleObject (Address: 0x10027208)
  • WaitForSingleObjectEx (Address: 0x100271e0)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x1002721c)
  • InitOnceComplete (Address: 0x10027224)
  • InitOnceExecuteOnce (Address: 0x10027220)
  • Sleep (Address: 0x10027218)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x1002722c)
  • GetTickCount (Address: 0x10027230)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x10027244)
  • CreateThreadpoolTimer (Address: 0x10027240)
  • SetThreadpoolTimer (Address: 0x1002723c)
  • WaitForThreadpoolTimerCallbacks (Address: 0x10027238)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
  • CreateTimerQueueTimer (Address: 0x1002724c)
  • DeleteTimerQueueTimer (Address: 0x10027250)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x10027258)
  • EncodePointer (Address: 0x1002725c)
api-ms-win-core-winrt-error-l1-1-0.dll
  • GetRestrictedErrorInfo (Address: 0x10027264)
  • RoOriginateError (Address: 0x10027270)
  • RoOriginateErrorW (Address: 0x10027268)
  • RoTransformError (Address: 0x1002726c)
  • SetRestrictedErrorInfo (Address: 0x10027274)
api-ms-win-core-winrt-error-l1-1-1.dll
  • IsErrorPropagationEnabled (Address: 0x10027284)
  • RoGetMatchingRestrictedErrorInfo (Address: 0x1002727c)
  • RoReportFailedDelegate (Address: 0x10027280)
api-ms-win-core-winrt-l1-1-0.dll
  • RoGetActivationFactory (Address: 0x1002728c)
api-ms-win-core-winrt-robuffer-l1-1-0.dll
  • RoGetBufferMarshaler (Address: 0x10027294)
api-ms-win-core-winrt-string-l1-1-0.dll
  • HSTRING_UserFree (Address: 0x100272b4)
  • HSTRING_UserMarshal (Address: 0x100272ac)
  • HSTRING_UserSize (Address: 0x100272b8)
  • HSTRING_UserUnmarshal (Address: 0x100272b0)
  • WindowsCreateString (Address: 0x1002729c)
  • WindowsCreateStringReference (Address: 0x100272c0)
  • WindowsDeleteString (Address: 0x100272a8)
  • WindowsDuplicateString (Address: 0x100272a4)
  • WindowsGetStringLen (Address: 0x100272a0)
  • WindowsGetStringRawBuffer (Address: 0x100272bc)
  • WindowsIsStringEmpty (Address: 0x100272c8)
  • WindowsStringHasEmbeddedNull (Address: 0x100272c4)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x100272dc)
  • EventSetInformation (Address: 0x100272d8)
  • EventUnregister (Address: 0x100272d0)
  • EventWriteTransfer (Address: 0x100272d4)
api-ms-win-security-base-l1-1-0.dll
  • DuplicateTokenEx (Address: 0x100272e8)
  • GetTokenInformation (Address: 0x100272e4)
  • IsWellKnownSid (Address: 0x100272ec)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertStringSidToSidW (Address: 0x100272f4)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolAllowThreadReuse (Address: 0x100272fc)
  • SHTaskPoolQueueTask (Address: 0x10027300)
combase.dll
  • (Address: 0x10027308)
msvcp110_win.dll
  • ?_Syserror_map@std@@YAPBDH@Z (Address: 0x10027314)
  • ?_Winerror_map@std@@YAPBDH@Z (Address: 0x10027320)
  • ?_Xbad_alloc@std@@YAXXZ (Address: 0x1002731c)
  • ?_Xlength_error@std@@YAXPBD@Z (Address: 0x10027318)
  • ?_Xout_of_range@std@@YAXPBD@Z (Address: 0x10027310)
msvcrt.dll
  • __CxxFrameHandler3 (Address: 0x10027370)
  • __dllonexit (Address: 0x10027380)
  • _amsg_exit (Address: 0x10027398)
  • _callnewh (Address: 0x100273a0)
  • _CxxThrowException (Address: 0x10027330)
  • _except_handler4_common (Address: 0x10027378)
  • _initterm (Address: 0x10027390)
  • _lock (Address: 0x10027388)
  • _onexit (Address: 0x1002737c)
  • _purecall (Address: 0x10027374)
  • _unlock (Address: 0x10027384)
  • _vsnprintf_s (Address: 0x10027358)
  • _vsnwprintf (Address: 0x1002733c)
  • _wcsicmp (Address: 0x10027364)
  • _wcsnicmp (Address: 0x10027368)
  • _XcptFilter (Address: 0x1002739c)
  • ??_V@YAXPAX@Z (Address: 0x10027348)
  • ??0exception@@QAE@ABV0@@Z (Address: 0x10027354)
  • ??0exception@@QAE@XZ (Address: 0x10027350)
  • ??1exception@@UAE@XZ (Address: 0x1002734c)
  • ??1type_info@@UAE@XZ (Address: 0x1002736c)
  • ??3@YAXPAX@Z (Address: 0x100273a8)
  • ?terminate@@YAXXZ (Address: 0x1002738c)
  • free (Address: 0x10027394)
  • malloc (Address: 0x100273a4)
  • memcmp (Address: 0x1002732c)
  • memcpy (Address: 0x10027328)
  • memcpy_s (Address: 0x10027340)
  • memmove (Address: 0x10027334)
  • memmove_s (Address: 0x10027344)
  • memset (Address: 0x10027338)
  • realloc (Address: 0x10027360)
  • wcsstr (Address: 0x1002735c)
ntdll.dll
  • NtQueryWnfStateData (Address: 0x100273bc)
  • RtlCrc32 (Address: 0x100273b0)
  • RtlIsStateSeparationEnabled (Address: 0x100273b8)
  • RtlSubscribeWnfStateChangeNotification (Address: 0x100273c0)
  • RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x100273b4)
OLEAUT32.dll
  • SysAllocString (Address: 0x10027004)
  • SysFreeString (Address: 0x10027000)
RPCRT4.dll
  • CStdStubBuffer_AddRef (Address: 0x10027048)
  • CStdStubBuffer_Connect (Address: 0x10027038)
  • CStdStubBuffer_CountRefs (Address: 0x1002700c)
  • CStdStubBuffer_DebugServerQueryInterface (Address: 0x10027028)
  • CStdStubBuffer_DebugServerRelease (Address: 0x1002704c)
  • CStdStubBuffer_Disconnect (Address: 0x1002702c)
  • CStdStubBuffer_Invoke (Address: 0x10027010)
  • CStdStubBuffer_IsIIDSupported (Address: 0x1002703c)
  • CStdStubBuffer_QueryInterface (Address: 0x10027054)
  • IUnknown_AddRef_Proxy (Address: 0x10027034)
  • IUnknown_QueryInterface_Proxy (Address: 0x10027044)
  • IUnknown_Release_Proxy (Address: 0x10027050)
  • NdrCStdStubBuffer_Release (Address: 0x10027014)
  • NdrCStdStubBuffer2_Release (Address: 0x10027024)
  • NdrDllCanUnloadNow (Address: 0x10027018)
  • NdrDllGetClassObject (Address: 0x1002701c)
  • NdrOleAllocate (Address: 0x10027058)
  • NdrOleFree (Address: 0x10027040)
  • NdrStubCall2 (Address: 0x10027030)
  • NdrStubForwardingFunction (Address: 0x10027020)
  • UuidFromStringW (Address: 0x1002705c)