Windows.Management.Workplace.dll
v10.0.19041.5848
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
DllCanUnloadNow
#1 · 0x9500
DllGetActivationFactory
#2 · 0x94c0
DllGetClassObject
#3 · 0x9540
No function matches your filter.
Imported DLLs & functions 204
CoCreateFreeThreadedMarshaler
0x10027084
CoCreateInstance
0x10027070
CoMarshalInterface
0x10027080
CoReleaseMarshalData
0x1002706c
CoRevertToSelf
0x10027064
CoTaskMemAlloc
0x10027068
CoTaskMemFree
0x10027078
CreateStreamOnHGlobal
0x1002707c
StringFromGUID2
0x10027074
RoGetAgileReference
0x1002708c
CStdStubBuffer2_Connect
0x10027098
CStdStubBuffer2_CountRefs
0x100270e0
CStdStubBuffer2_Disconnect
0x100270a8
CStdStubBuffer2_QueryInterface
0x100270dc
NdrProxyForwardingFunction3
0x10027094
NdrProxyForwardingFunction4
0x100270b0
NdrProxyForwardingFunction5
0x100270bc
ObjectStublessClient10
0x100270cc
ObjectStublessClient11
0x100270b8
ObjectStublessClient12
0x100270a4
ObjectStublessClient13
0x100270c0
ObjectStublessClient14
0x1002709c
ObjectStublessClient15
0x100270b4
ObjectStublessClient16
0x100270d0
ObjectStublessClient17
0x100270c4
ObjectStublessClient18
0x100270ac
ObjectStublessClient3
0x100270d4
ObjectStublessClient6
0x100270c8
ObjectStublessClient7
0x100270a0
ObjectStublessClient8
0x100270e4
ObjectStublessClient9
0x100270d8
DebugBreak
0x100270ec
IsDebuggerPresent
0x100270f0
OutputDebugStringW
0x100270f4
DelayLoadFailureHook
0x100270fc
ResolveDelayLoadedAPI
0x10027104
GetLastError
0x10027114
RaiseException
0x10027118
SetLastError
0x10027110
SetUnhandledExceptionFilter
0x1002711c
UnhandledExceptionFilter
0x1002710c
CloseHandle
0x10027124
GetProcessHeap
0x10027130
HeapAlloc
0x10027134
HeapFree
0x1002712c
LocalFree
0x1002713c
DisableThreadLibraryCalls
0x10027150
GetModuleFileNameA
0x10027154
GetModuleHandleExW
0x1002714c
GetModuleHandleW
0x10027148
GetProcAddress
0x10027144
FormatMessageW
0x1002715c
GetCurrentProcess
0x1002716c
GetCurrentProcessId
0x10027168
GetCurrentThread
0x1002717c
GetCurrentThreadId
0x10027170
OpenProcessToken
0x10027178
OpenThreadToken
0x10027164
TerminateProcess
0x10027174
OpenProcess
0x10027184
QueryPerformanceCounter
0x1002718c
RegCloseKey
0x10027194
RegCreateKeyExW
0x100271b4
RegDeleteTreeW
0x100271a4
RegEnumKeyExW
0x100271a8
RegGetValueW
0x100271b8
RegNotifyChangeKeyValue
0x100271a0
RegOpenKeyExW
0x1002719c
RegQueryInfoKeyW
0x100271ac
RegQueryValueExW
0x10027198
RegSetValueExW
0x100271b0
RegQueryMultipleValuesW
0x100271c0
AcquireSRWLockExclusive
0x100271c8
AcquireSRWLockShared
0x100271cc
CreateEventW
0x100271d0
CreateMutexExW
0x100271e8
CreateSemaphoreExW
0x100271e4
DeleteCriticalSection
0x100271f0
EnterCriticalSection
0x100271f4
InitializeCriticalSectionEx
0x100271ec
InitializeSRWLock
0x100271dc
LeaveCriticalSection
0x100271f8
OpenSemaphoreW
0x10027200
ReleaseMutex
0x1002720c
ReleaseSemaphore
0x10027204
ReleaseSRWLockExclusive
0x100271fc
ReleaseSRWLockShared
0x100271d4
ResetEvent
0x100271d8
TryAcquireSRWLockShared
0x10027210
WaitForSingleObject
0x10027208
WaitForSingleObjectEx
0x100271e0
InitOnceBeginInitialize
0x1002721c
InitOnceComplete
0x10027224
InitOnceExecuteOnce
0x10027220
Sleep
0x10027218
CloseThreadpoolTimer
0x10027244
CreateThreadpoolTimer
0x10027240
SetThreadpoolTimer
0x1002723c
WaitForThreadpoolTimerCallbacks
0x10027238
CreateTimerQueueTimer
0x1002724c
DeleteTimerQueueTimer
0x10027250
GetRestrictedErrorInfo
0x10027264
RoOriginateError
0x10027270
RoOriginateErrorW
0x10027268
RoTransformError
0x1002726c
SetRestrictedErrorInfo
0x10027274
IsErrorPropagationEnabled
0x10027284
RoGetMatchingRestrictedErrorInfo
0x1002727c
RoReportFailedDelegate
0x10027280
RoGetActivationFactory
0x1002728c
RoGetBufferMarshaler
0x10027294
HSTRING_UserFree
0x100272b4
HSTRING_UserMarshal
0x100272ac
HSTRING_UserSize
0x100272b8
HSTRING_UserUnmarshal
0x100272b0
WindowsCreateString
0x1002729c
WindowsCreateStringReference
0x100272c0
WindowsDeleteString
0x100272a8
WindowsDuplicateString
0x100272a4
WindowsGetStringLen
0x100272a0
WindowsGetStringRawBuffer
0x100272bc
WindowsIsStringEmpty
0x100272c8
WindowsStringHasEmbeddedNull
0x100272c4
EventRegister
0x100272dc
EventSetInformation
0x100272d8
EventUnregister
0x100272d0
EventWriteTransfer
0x100272d4
DuplicateTokenEx
0x100272e8
GetTokenInformation
0x100272e4
IsWellKnownSid
0x100272ec
ConvertStringSidToSidW
0x100272f4
SHTaskPoolAllowThreadReuse
0x100272fc
SHTaskPoolQueueTask
0x10027300
0x10027308
?_Syserror_map@std@@YAPBDH@Z
0x10027314
?_Winerror_map@std@@YAPBDH@Z
0x10027320
?_Xbad_alloc@std@@YAXXZ
0x1002731c
?_Xlength_error@std@@YAXPBD@Z
0x10027318
?_Xout_of_range@std@@YAXPBD@Z
0x10027310
msvcrt.dll
33
__CxxFrameHandler3
0x10027370
__dllonexit
0x10027380
_amsg_exit
0x10027398
_callnewh
0x100273a0
_CxxThrowException
0x10027330
_except_handler4_common
0x10027378
_initterm
0x10027390
_lock
0x10027388
_onexit
0x1002737c
_purecall
0x10027374
_unlock
0x10027384
_vsnprintf_s
0x10027358
_vsnwprintf
0x1002733c
_wcsicmp
0x10027364
_wcsnicmp
0x10027368
_XcptFilter
0x1002739c
??_V@YAXPAX@Z
0x10027348
??0exception@@QAE@ABV0@@Z
0x10027354
??0exception@@QAE@XZ
0x10027350
??1exception@@UAE@XZ
0x1002734c
??1type_info@@UAE@XZ
0x1002736c
??3@YAXPAX@Z
0x100273a8
?terminate@@YAXXZ
0x1002738c
free
0x10027394
malloc
0x100273a4
memcmp
0x1002732c
memcpy
0x10027328
memcpy_s
0x10027340
memmove
0x10027334
memmove_s
0x10027344
memset
0x10027338
realloc
0x10027360
wcsstr
0x1002735c
NtQueryWnfStateData
0x100273bc
RtlCrc32
0x100273b0
RtlIsStateSeparationEnabled
0x100273b8
RtlSubscribeWnfStateChangeNotification
0x100273c0
RtlUnsubscribeWnfNotificationWaitForCompletion
0x100273b4
RPCRT4.dll
21
CStdStubBuffer_AddRef
0x10027048
CStdStubBuffer_Connect
0x10027038
CStdStubBuffer_CountRefs
0x1002700c
CStdStubBuffer_DebugServerQueryInterface
0x10027028
CStdStubBuffer_DebugServerRelease
0x1002704c
CStdStubBuffer_Disconnect
0x1002702c
CStdStubBuffer_Invoke
0x10027010
CStdStubBuffer_IsIIDSupported
0x1002703c
CStdStubBuffer_QueryInterface
0x10027054
IUnknown_AddRef_Proxy
0x10027034
IUnknown_QueryInterface_Proxy
0x10027044
IUnknown_Release_Proxy
0x10027050
NdrCStdStubBuffer_Release
0x10027014
NdrCStdStubBuffer2_Release
0x10027024
NdrDllCanUnloadNow
0x10027018
NdrDllGetClassObject
0x1002701c
NdrOleAllocate
0x10027058
NdrOleFree
0x10027040
NdrStubCall2
0x10027030
NdrStubForwardingFunction
0x10027020
UuidFromStringW
0x1002705c
No function matches your filter.