Windows.Management.Workplace.dll

Description: Windows Runtime MdmPolicy DLL

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5848

Architecture: 64-bit

Operating System: Windows NT

SHA256: 70dd7e6cbc305404c00dda2e9d5d7fcb

File Size: 248.4 KB

Uploaded At: Dec. 1, 2025, 7:43 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x2620)
  • DllGetActivationFactory (Ordinal: 2, Address: 0x2420)
  • DllGetClassObject (Ordinal: 3, Address: 0x26a0)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CoCreateFreeThreadedMarshaler (Address: 0x18002c7b0)
  • CoCreateInstance (Address: 0x18002c7a0)
  • CoMarshalInterface (Address: 0x18002c7c0)
  • CoReleaseMarshalData (Address: 0x18002c7b8)
  • CoRevertToSelf (Address: 0x18002c7a8)
  • CoTaskMemAlloc (Address: 0x18002c7d0)
  • CoTaskMemFree (Address: 0x18002c798)
  • CreateStreamOnHGlobal (Address: 0x18002c7d8)
  • StringFromGUID2 (Address: 0x18002c7c8)
api-ms-win-core-com-l1-1-1.dll
  • RoGetAgileReference (Address: 0x18002c7e8)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
  • CStdStubBuffer2_Connect (Address: 0x18002c828)
  • CStdStubBuffer2_CountRefs (Address: 0x18002c830)
  • CStdStubBuffer2_Disconnect (Address: 0x18002c868)
  • CStdStubBuffer2_QueryInterface (Address: 0x18002c7f8)
  • NdrProxyForwardingFunction3 (Address: 0x18002c858)
  • NdrProxyForwardingFunction4 (Address: 0x18002c898)
  • NdrProxyForwardingFunction5 (Address: 0x18002c800)
  • ObjectStublessClient10 (Address: 0x18002c880)
  • ObjectStublessClient11 (Address: 0x18002c848)
  • ObjectStublessClient12 (Address: 0x18002c838)
  • ObjectStublessClient13 (Address: 0x18002c870)
  • ObjectStublessClient14 (Address: 0x18002c840)
  • ObjectStublessClient15 (Address: 0x18002c860)
  • ObjectStublessClient16 (Address: 0x18002c890)
  • ObjectStublessClient17 (Address: 0x18002c878)
  • ObjectStublessClient18 (Address: 0x18002c850)
  • ObjectStublessClient3 (Address: 0x18002c888)
  • ObjectStublessClient6 (Address: 0x18002c808)
  • ObjectStublessClient7 (Address: 0x18002c820)
  • ObjectStublessClient8 (Address: 0x18002c810)
  • ObjectStublessClient9 (Address: 0x18002c818)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x18002c8b8)
  • IsDebuggerPresent (Address: 0x18002c8b0)
  • OutputDebugStringW (Address: 0x18002c8a8)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x18002c8c8)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x18002c8d8)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x18002c8f0)
  • RaiseException (Address: 0x18002c8e8)
  • SetLastError (Address: 0x18002c8f8)
  • SetUnhandledExceptionFilter (Address: 0x18002c908)
  • UnhandledExceptionFilter (Address: 0x18002c900)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x18002c918)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x18002c930)
  • HeapAlloc (Address: 0x18002c938)
  • HeapFree (Address: 0x18002c928)
api-ms-win-core-heap-l2-1-0.dll
  • LocalFree (Address: 0x18002c948)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x18002c958)
  • GetModuleFileNameA (Address: 0x18002c960)
  • GetModuleHandleExW (Address: 0x18002c978)
  • GetModuleHandleW (Address: 0x18002c968)
  • GetProcAddress (Address: 0x18002c970)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x18002c988)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x18002c9a8)
  • GetCurrentProcessId (Address: 0x18002c9c0)
  • GetCurrentThread (Address: 0x18002c9b8)
  • GetCurrentThreadId (Address: 0x18002c9b0)
  • OpenProcessToken (Address: 0x18002c9c8)
  • OpenThreadToken (Address: 0x18002c998)
  • TerminateProcess (Address: 0x18002c9a0)
api-ms-win-core-processthreads-l1-1-1.dll
  • OpenProcess (Address: 0x18002c9d8)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x18002c9e8)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x18002c9f8)
  • RegCreateKeyExW (Address: 0x18002ca18)
  • RegDeleteTreeW (Address: 0x18002ca40)
  • RegEnumKeyExW (Address: 0x18002ca10)
  • RegGetValueW (Address: 0x18002ca00)
  • RegNotifyChangeKeyValue (Address: 0x18002ca28)
  • RegOpenKeyExW (Address: 0x18002ca08)
  • RegQueryInfoKeyW (Address: 0x18002ca20)
  • RegQueryValueExW (Address: 0x18002ca30)
  • RegSetValueExW (Address: 0x18002ca38)
api-ms-win-core-registry-l1-1-2.dll
  • RegQueryMultipleValuesW (Address: 0x18002ca50)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x18002ca70)
  • RtlLookupFunctionEntry (Address: 0x18002ca68)
  • RtlVirtualUnwind (Address: 0x18002ca60)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x18002caa8)
  • AcquireSRWLockShared (Address: 0x18002cac0)
  • CreateEventW (Address: 0x18002ca98)
  • CreateMutexExW (Address: 0x18002cb10)
  • CreateSemaphoreExW (Address: 0x18002cae0)
  • DeleteCriticalSection (Address: 0x18002cb00)
  • EnterCriticalSection (Address: 0x18002cb08)
  • InitializeCriticalSectionEx (Address: 0x18002ca88)
  • InitializeSRWLock (Address: 0x18002caf8)
  • LeaveCriticalSection (Address: 0x18002cad8)
  • OpenSemaphoreW (Address: 0x18002ca80)
  • ReleaseMutex (Address: 0x18002cad0)
  • ReleaseSemaphore (Address: 0x18002caa0)
  • ReleaseSRWLockExclusive (Address: 0x18002cac8)
  • ReleaseSRWLockShared (Address: 0x18002ca90)
  • ResetEvent (Address: 0x18002cab0)
  • TryAcquireSRWLockShared (Address: 0x18002cab8)
  • WaitForSingleObject (Address: 0x18002cae8)
  • WaitForSingleObjectEx (Address: 0x18002caf0)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x18002cb28)
  • InitOnceComplete (Address: 0x18002cb30)
  • InitOnceExecuteOnce (Address: 0x18002cb38)
  • Sleep (Address: 0x18002cb20)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x18002cb48)
  • GetTickCount (Address: 0x18002cb50)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x18002cb68)
  • CreateThreadpoolTimer (Address: 0x18002cb60)
  • SetThreadpoolTimer (Address: 0x18002cb78)
  • WaitForThreadpoolTimerCallbacks (Address: 0x18002cb70)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
  • CreateTimerQueueTimer (Address: 0x18002cb90)
  • DeleteTimerQueueTimer (Address: 0x18002cb88)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x18002cba8)
  • EncodePointer (Address: 0x18002cba0)
api-ms-win-core-winrt-error-l1-1-0.dll
  • GetRestrictedErrorInfo (Address: 0x18002cbc0)
  • RoOriginateError (Address: 0x18002cbd8)
  • RoOriginateErrorW (Address: 0x18002cbc8)
  • RoTransformError (Address: 0x18002cbb8)
  • SetRestrictedErrorInfo (Address: 0x18002cbd0)
api-ms-win-core-winrt-error-l1-1-1.dll
  • IsErrorPropagationEnabled (Address: 0x18002cbf8)
  • RoGetMatchingRestrictedErrorInfo (Address: 0x18002cbf0)
  • RoReportFailedDelegate (Address: 0x18002cbe8)
api-ms-win-core-winrt-l1-1-0.dll
  • RoGetActivationFactory (Address: 0x18002cc08)
api-ms-win-core-winrt-robuffer-l1-1-0.dll
  • RoGetBufferMarshaler (Address: 0x18002cc18)
api-ms-win-core-winrt-string-l1-1-0.dll
  • HSTRING_UserFree (Address: 0x18002cc50)
  • HSTRING_UserFree64 (Address: 0x18002cc30)
  • HSTRING_UserMarshal (Address: 0x18002cc38)
  • HSTRING_UserMarshal64 (Address: 0x18002cc58)
  • HSTRING_UserSize (Address: 0x18002cc78)
  • HSTRING_UserSize64 (Address: 0x18002cc28)
  • HSTRING_UserUnmarshal (Address: 0x18002cc40)
  • HSTRING_UserUnmarshal64 (Address: 0x18002cca0)
  • WindowsCreateString (Address: 0x18002cc80)
  • WindowsCreateStringReference (Address: 0x18002cc90)
  • WindowsDeleteString (Address: 0x18002cc88)
  • WindowsDuplicateString (Address: 0x18002cc98)
  • WindowsGetStringLen (Address: 0x18002cc48)
  • WindowsGetStringRawBuffer (Address: 0x18002cc70)
  • WindowsIsStringEmpty (Address: 0x18002cc60)
  • WindowsStringHasEmbeddedNull (Address: 0x18002cc68)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x18002ccc8)
  • EventSetInformation (Address: 0x18002ccc0)
  • EventUnregister (Address: 0x18002ccb0)
  • EventWriteTransfer (Address: 0x18002ccb8)
api-ms-win-security-base-l1-1-0.dll
  • DuplicateTokenEx (Address: 0x18002ccd8)
  • GetTokenInformation (Address: 0x18002cce0)
  • IsWellKnownSid (Address: 0x18002cce8)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertStringSidToSidW (Address: 0x18002ccf8)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolAllowThreadReuse (Address: 0x18002cd10)
  • SHTaskPoolQueueTask (Address: 0x18002cd08)
combase.dll
  • (Address: 0x18002cd20)
msvcp110_win.dll
  • ?_Syserror_map@std@@YAPEBDH@Z (Address: 0x18002cd48)
  • ?_Winerror_map@std@@YAPEBDH@Z (Address: 0x18002cd50)
  • ?_Xbad_alloc@std@@YAXXZ (Address: 0x18002cd38)
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18002cd40)
  • ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x18002cd30)
msvcrt.dll
  • __C_specific_handler (Address: 0x18002ce28)
  • __CxxFrameHandler3 (Address: 0x18002cdf0)
  • __dllonexit (Address: 0x18002ce08)
  • _amsg_exit (Address: 0x18002ce40)
  • _callnewh (Address: 0x18002ce50)
  • _CxxThrowException (Address: 0x18002cd70)
  • _initterm (Address: 0x18002ce30)
  • _lock (Address: 0x18002ce18)
  • _onexit (Address: 0x18002ce00)
  • _purecall (Address: 0x18002cdf8)
  • _unlock (Address: 0x18002ce10)
  • _vsnprintf_s (Address: 0x18002cdc0)
  • _vsnwprintf (Address: 0x18002cd88)
  • _wcsicmp (Address: 0x18002cdd8)
  • _wcsnicmp (Address: 0x18002cde0)
  • _XcptFilter (Address: 0x18002ce48)
  • ??_V@YAXPEAX@Z (Address: 0x18002cda0)
  • ??0exception@@QEAA@AEBV0@@Z (Address: 0x18002cdb8)
  • ??0exception@@QEAA@XZ (Address: 0x18002cdb0)
  • ??1exception@@UEAA@XZ (Address: 0x18002cda8)
  • ??1type_info@@UEAA@XZ (Address: 0x18002cde8)
  • ??3@YAXPEAX@Z (Address: 0x18002ce60)
  • ?terminate@@YAXXZ (Address: 0x18002ce20)
  • free (Address: 0x18002ce38)
  • malloc (Address: 0x18002ce58)
  • memcmp (Address: 0x18002cd68)
  • memcpy (Address: 0x18002cd60)
  • memcpy_s (Address: 0x18002cd90)
  • memmove (Address: 0x18002cd78)
  • memmove_s (Address: 0x18002cd98)
  • memset (Address: 0x18002cd80)
  • realloc (Address: 0x18002cdd0)
  • wcsstr (Address: 0x18002cdc8)
ntdll.dll
  • NtQueryWnfStateData (Address: 0x18002ce88)
  • RtlCrc32 (Address: 0x18002ce70)
  • RtlIsStateSeparationEnabled (Address: 0x18002ce80)
  • RtlSubscribeWnfStateChangeNotification (Address: 0x18002ce90)
  • RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x18002ce78)
OLEAUT32.dll
  • SysAllocString (Address: 0x18002c6d8)
  • SysFreeString (Address: 0x18002c6d0)
RPCRT4.dll
  • CStdStubBuffer_AddRef (Address: 0x18002c718)
  • CStdStubBuffer_Connect (Address: 0x18002c728)
  • CStdStubBuffer_CountRefs (Address: 0x18002c710)
  • CStdStubBuffer_DebugServerQueryInterface (Address: 0x18002c760)
  • CStdStubBuffer_DebugServerRelease (Address: 0x18002c788)
  • CStdStubBuffer_Disconnect (Address: 0x18002c708)
  • CStdStubBuffer_Invoke (Address: 0x18002c700)
  • CStdStubBuffer_IsIIDSupported (Address: 0x18002c768)
  • CStdStubBuffer_QueryInterface (Address: 0x18002c6f0)
  • IUnknown_AddRef_Proxy (Address: 0x18002c740)
  • IUnknown_QueryInterface_Proxy (Address: 0x18002c780)
  • IUnknown_Release_Proxy (Address: 0x18002c720)
  • NdrCStdStubBuffer_Release (Address: 0x18002c730)
  • NdrCStdStubBuffer2_Release (Address: 0x18002c748)
  • NdrDllCanUnloadNow (Address: 0x18002c738)
  • NdrDllGetClassObject (Address: 0x18002c750)
  • NdrOleAllocate (Address: 0x18002c770)
  • NdrOleFree (Address: 0x18002c6f8)
  • NdrStubCall3 (Address: 0x18002c778)
  • NdrStubForwardingFunction (Address: 0x18002c6e8)
  • UuidFromStringW (Address: 0x18002c758)