¿Para qué sirve la dll RTWorkQ.dll?

Realtime WorkQueue DLL

Dependencias de la dll RTWorkQ.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\RTWorkQ.dll

File Type: DLL

  Image has the following dependencies:

    msvcrt.dll
    api-ms-win-core-libraryloader-l1-2-0.dll
    api-ms-win-eventing-provider-l1-1-0.dll
    api-ms-win-core-synch-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-0.dll
    api-ms-win-core-heap-l1-1-0.dll
    api-ms-win-core-handle-l1-1-0.dll
    api-ms-win-core-errorhandling-l1-1-0.dll
    api-ms-win-core-com-l1-1-0.dll
    api-ms-win-core-threadpool-l1-2-0.dll
    api-ms-win-eventing-classicprovider-l1-1-0.dll
    api-ms-win-core-sysinfo-l1-2-0.dll
    ntdll.dll
    api-ms-win-core-fibers-l1-1-0.dll
    api-ms-win-core-sysinfo-l1-1-0.dll
    api-ms-win-core-com-private-l1-1-0.dll
    api-ms-win-core-debug-l1-1-0.dll
    api-ms-win-core-profile-l1-1-0.dll
    api-ms-win-core-io-l1-1-0.dll
    api-ms-win-core-synch-l1-2-0.dll
    api-ms-win-core-rtlsupport-l1-1-0.dll
    api-ms-win-core-delayload-l1-1-1.dll
    api-ms-win-core-delayload-l1-1-0.dll

  Image has the following delay load dependencies:

    AVRT.dll
    api-ms-win-rtcore-ntuser-synch-l1-1-0.dll
    api-ms-win-rtcore-ntuser-window-l1-1-0.dll
    urlmon.dll

  Summary

        5000 .data
        1000 .didat
        2000 .pdata
        6000 .rdata
        1000 .reloc
        8000 .rsrc
       18000 .text

Funciones que tiene la dll RTWorkQ.dll


2    0 000050F0 RtwqAddPeriodicCallback
3    1 00006EF0 RtwqAllocateSerialWorkQueue
4    2 00002E50 RtwqAllocateWorkQueue
5    3 00004060 RtwqBeginRegisterWorkQueueWithMMCSS
6    4 00013EE0 RtwqBeginUnregisterWorkQueueWithMMCSS
7    5 00002580 RtwqCancelDeadline
8    6 00013C50 RtwqCancelMultipleWaitingWorkItem
9    7 0000BE40 RtwqCancelWorkItem
10    8 0000BD70 RtwqCreateAsyncResult
11    9 00005780 RtwqEndRegisterWorkQueueWithMMCSS
12    A 00013FD0 RtwqEndUnregisterWorkQueueWithMMCSS
1    B 00013630 RtwqGetPlatform
13    C 00014000 RtwqGetWorkQueueMMCSSClass
14    D 000058B0 RtwqGetWorkQueueMMCSSPriority
15    E 00014120 RtwqGetWorkQueueMMCSSTaskId
16    F 00001F80 RtwqInvokeCallback
17   10 000059A0 RtwqJoinWorkQueue
18   11 00002310 RtwqLockPlatform
19   12 000032F0 RtwqLockSharedWorkQueue
20   13 00004AD0 RtwqLockWorkQueue
21   14 00013C80 RtwqPutMultipleWaitingWorkItem
22   15 00006120 RtwqPutWaitingWorkItem
23   16 0000A6B0 RtwqPutWorkItem
24   17 0000C2C0 RtwqRegisterPlatformEvents
25   18 00002F10 RtwqRegisterPlatformWithMMCSS
26   19 00005690 RtwqRemovePeriodicCallback
27   1A 000027E0 RtwqScheduleWorkItem
28   1B 00002350 RtwqSetDeadline
29   1C 00002370 RtwqSetDeadline2
30   1D 00001040 RtwqSetLongRunning
31   1E 0000AAA0 RtwqShutdown
32   1F 00006AF0 RtwqStartup
33   20 00005A90 RtwqUnjoinWorkQueue
34   21 000022D0 RtwqUnlockPlatform
35   22 000096F0 RtwqUnlockWorkQueue
36   23 00014230 RtwqUnregisterPlatformEvents
37   24 00014250 RtwqUnregisterPlatformFromMMCSS

Información avanzada sobre funciones que tiene la dll RTWorkQ.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\RTWorkQ.dll

File Type: DLL

  Section contains the following exports for RTWorkQ.DLL

    00000000 characteristics
    7BC260DA time date stamp
        0.00 version
           1 ordinal base
          37 number of functions
          37 number of names

    ordinal hint RVA      name

          2    0 000050F0 RtwqAddPeriodicCallback
          3    1 00006EF0 RtwqAllocateSerialWorkQueue
          4    2 00002E50 RtwqAllocateWorkQueue
          5    3 00004060 RtwqBeginRegisterWorkQueueWithMMCSS
          6    4 00013EE0 RtwqBeginUnregisterWorkQueueWithMMCSS
          7    5 00002580 RtwqCancelDeadline
          8    6 00013C50 RtwqCancelMultipleWaitingWorkItem
          9    7 0000BE40 RtwqCancelWorkItem
         10    8 0000BD70 RtwqCreateAsyncResult
         11    9 00005780 RtwqEndRegisterWorkQueueWithMMCSS
         12    A 00013FD0 RtwqEndUnregisterWorkQueueWithMMCSS
          1    B 00013630 RtwqGetPlatform
         13    C 00014000 RtwqGetWorkQueueMMCSSClass
         14    D 000058B0 RtwqGetWorkQueueMMCSSPriority
         15    E 00014120 RtwqGetWorkQueueMMCSSTaskId
         16    F 00001F80 RtwqInvokeCallback
         17   10 000059A0 RtwqJoinWorkQueue
         18   11 00002310 RtwqLockPlatform
         19   12 000032F0 RtwqLockSharedWorkQueue
         20   13 00004AD0 RtwqLockWorkQueue
         21   14 00013C80 RtwqPutMultipleWaitingWorkItem
         22   15 00006120 RtwqPutWaitingWorkItem
         23   16 0000A6B0 RtwqPutWorkItem
         24   17 0000C2C0 RtwqRegisterPlatformEvents
         25   18 00002F10 RtwqRegisterPlatformWithMMCSS
         26   19 00005690 RtwqRemovePeriodicCallback
         27   1A 000027E0 RtwqScheduleWorkItem
         28   1B 00002350 RtwqSetDeadline
         29   1C 00002370 RtwqSetDeadline2
         30   1D 00001040 RtwqSetLongRunning
         31   1E 0000AAA0 RtwqShutdown
         32   1F 00006AF0 RtwqStartup
         33   20 00005A90 RtwqUnjoinWorkQueue
         34   21 000022D0 RtwqUnlockPlatform
         35   22 000096F0 RtwqUnlockWorkQueue
         36   23 00014230 RtwqUnregisterPlatformEvents
         37   24 00014250 RtwqUnregisterPlatformFromMMCSS

  Summary

        5000 .data
        1000 .didat
        2000 .pdata
        6000 .rdata
        1000 .reloc
        8000 .rsrc
       18000 .text

Integridad de la dll RTWorkQ.dll



Algorithm       Hash                                                                   Path                                         
---------       ----                                                                   ----                                         
SHA256          A484A801CB56D499DBBDAE0D29BDED4D09AC43DAA49AE2F6A387FE53A2B9C752       C:\Windows\System32\RTWorkQ.dll              


Detalles sobre el fichero dll RTWorkQ.dll




PSPath            : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\RTWorkQ.dll
PSParentPath      : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName       : RTWorkQ.dll
PSDrive           : C
PSProvider        : Microsoft.PowerShell.Core\FileSystem
PSIsContainer     : False
Mode              : -a----
VersionInfo       : File:             C:\Windows\System32\RTWorkQ.dll
                    InternalName:     Realtime WorkQueue DLL
                    OriginalFilename: RTWorkQ.dll.mui
                    FileVersion:      10.0.19041.1 (WinBuild.160101.0800)
                    FileDescription:  Realtime WorkQueue DLL
                    Product:          Microsoft® Windows® Operating System
                    ProductVersion:   10.0.19041.1
                    Debug:            False
                    Patched:          False
                    PreRelease:       False
                    PrivateBuild:     False
                    SpecialBuild:     False
                    Language:         Inglés (Estados Unidos)
                    
BaseName          : RTWorkQ
Target            : {C:\Windows\WinSxS\amd64_microsoft-windows-rtworkq_31bf3856ad364e35_10.0.19041.546_none_cbe7bc3587db5d91\RTWorkQ
                    .dll}
LinkType          : HardLink
Name              : RTWorkQ.dll
Length            : 171992
DirectoryName     : C:\Windows\System32
Directory         : C:\Windows\System32
IsReadOnly        : False
Exists            : True
FullName          : C:\Windows\System32\RTWorkQ.dll
Extension         : .dll
CreationTime      : 21/11/2020 8:40:47
CreationTimeUtc   : 21/11/2020 7:40:47
LastAccessTime    : 03/12/2020 14:48:47
LastAccessTimeUtc : 03/12/2020 13:48:47
LastWriteTime     : 21/11/2020 8:40:47
LastWriteTimeUtc  : 21/11/2020 7:40:47
Attributes        : Archive



Procesos que utilizan la dll RTWorkQ.dll


chrome
explorer
KinectService
Microsoft.Photos
SystemSettings