ConfigureExpandedStorage.dll
v10.0.19041.5794
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 2
DllCanUnloadNow
#1 · 0xbc30
DllGetActivationFactory
#2 · 0xbc10
No function matches your filter.
Imported DLLs & functions 104
CoCreateFreeThreadedMarshaler
0x1000e024
CoCreateInstance
0x1000e028
CoGetMalloc
0x1000e034
CoMarshalInterface
0x1000e03c
CoReleaseMarshalData
0x1000e030
CoTaskMemAlloc
0x1000e038
CoTaskMemFree
0x1000e02c
CoTaskMemRealloc
0x1000e040
CreateStreamOnHGlobal
0x1000e020
RoGetAgileReference
0x1000e048
DebugBreak
0x1000e054
IsDebuggerPresent
0x1000e058
OutputDebugStringW
0x1000e050
GetLastError
0x1000e060
RaiseException
0x1000e070
SetLastError
0x1000e068
SetUnhandledExceptionFilter
0x1000e06c
UnhandledExceptionFilter
0x1000e064
CreateDirectoryW
0x1000e078
CloseHandle
0x1000e080
GetProcessHeap
0x1000e08c
HeapAlloc
0x1000e088
HeapFree
0x1000e090
LocalFree
0x1000e098
GetModuleFileNameA
0x1000e0a8
GetModuleHandleExW
0x1000e0ac
GetModuleHandleW
0x1000e0a0
GetProcAddress
0x1000e0a4
FormatMessageW
0x1000e0b4
PathAllocCombine
0x1000e0bc
GetCurrentProcess
0x1000e0c8
GetCurrentProcessId
0x1000e0d4
GetCurrentThreadId
0x1000e0c4
OpenProcessToken
0x1000e0d0
TerminateProcess
0x1000e0cc
OpenProcess
0x1000e0dc
QueryPerformanceCounter
0x1000e0e4
AcquireSRWLockExclusive
0x1000e100
AcquireSRWLockShared
0x1000e114
CreateMutexExW
0x1000e0f4
CreateSemaphoreExW
0x1000e120
DeleteCriticalSection
0x1000e124
EnterCriticalSection
0x1000e118
InitializeCriticalSectionEx
0x1000e108
LeaveCriticalSection
0x1000e0fc
OpenSemaphoreW
0x1000e110
ReleaseMutex
0x1000e0f0
ReleaseSemaphore
0x1000e104
ReleaseSRWLockExclusive
0x1000e0f8
ReleaseSRWLockShared
0x1000e11c
WaitForSingleObject
0x1000e0ec
WaitForSingleObjectEx
0x1000e10c
CloseThreadpoolTimer
0x1000e150
CreateThreadpoolTimer
0x1000e144
SetThreadpoolTimer
0x1000e14c
WaitForThreadpoolTimerCallbacks
0x1000e148
GetRestrictedErrorInfo
0x1000e16c
RoOriginateError
0x1000e168
RoOriginateErrorW
0x1000e164
RoTransformError
0x1000e170
SetRestrictedErrorInfo
0x1000e174
IsErrorPropagationEnabled
0x1000e184
RoGetMatchingRestrictedErrorInfo
0x1000e17c
RoReportFailedDelegate
0x1000e180
RoGetActivationFactory
0x1000e18c
WindowsCreateString
0x1000e194
WindowsCreateStringReference
0x1000e1a0
WindowsGetStringRawBuffer
0x1000e198
WindowsIsStringEmpty
0x1000e19c
WindowsStringHasEmbeddedNull
0x1000e1a4
GetTokenInformation
0x1000e1ac
SHTaskPoolAllowThreadReuse
0x1000e1b8
SHTaskPoolQueueTask
0x1000e1b4
msvcrt.dll
20
__CxxFrameHandler3
0x1000e1f8
__dllonexit
0x1000e1c0
_amsg_exit
0x1000e1d4
_callnewh
0x1000e204
_except_handler4_common
0x1000e1cc
_get_errno
0x1000e1e4
_initterm
0x1000e1c8
_lock
0x1000e200
_onexit
0x1000e1c4
_purecall
0x1000e1ec
_set_errno
0x1000e1e8
_unlock
0x1000e1dc
_vsnwprintf
0x1000e1f4
_XcptFilter
0x1000e1d8
free
0x1000e1fc
malloc
0x1000e1d0
memcmp
0x1000e208
memcpy_s
0x1000e1f0
memmove_s
0x1000e1e0
memset
0x1000e20c
PathFileExistsW
0x1000e010
GetUserNameExW
0x1000e018
No function matches your filter.