ConfigureExpandedStorage.dll

Description: ConfigureExpandedStorage

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: 8c41061ef35ead6dc2a5285292422a84

File Size: 80.5 KB

Uploaded At: Dec. 1, 2025, 7:24 a.m.

Views: 12

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0xde60)
  • DllGetActivationFactory (Ordinal: 2, Address: 0xdc90)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CoCreateFreeThreadedMarshaler (Address: 0x180010fe8)
  • CoCreateInstance (Address: 0x180010ff8)
  • CoMarshalInterface (Address: 0x180010fd0)
  • CoReleaseMarshalData (Address: 0x180011000)
  • CoTaskMemAlloc (Address: 0x180010fd8)
  • CoTaskMemFree (Address: 0x180010ff0)
  • CoTaskMemRealloc (Address: 0x180010fe0)
  • CreateStreamOnHGlobal (Address: 0x180011008)
api-ms-win-core-com-l1-1-1.dll
  • RoGetAgileReference (Address: 0x180011018)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x180011038)
  • IsDebuggerPresent (Address: 0x180011030)
  • OutputDebugStringW (Address: 0x180011028)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x180011058)
  • RaiseException (Address: 0x180011048)
  • SetLastError (Address: 0x180011068)
  • SetUnhandledExceptionFilter (Address: 0x180011060)
  • UnhandledExceptionFilter (Address: 0x180011050)
api-ms-win-core-file-l1-1-0.dll
  • CreateDirectoryW (Address: 0x180011078)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x180011088)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1800110a8)
  • HeapAlloc (Address: 0x1800110a0)
  • HeapFree (Address: 0x180011098)
api-ms-win-core-heap-l2-1-0.dll
  • LocalFree (Address: 0x1800110b8)
api-ms-win-core-libraryloader-l1-2-0.dll
  • GetModuleFileNameA (Address: 0x1800110d0)
  • GetModuleHandleExW (Address: 0x1800110c8)
  • GetModuleHandleW (Address: 0x1800110d8)
  • GetProcAddress (Address: 0x1800110e0)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1800110f0)
api-ms-win-core-path-l1-1-0.dll
  • PathAllocCombine (Address: 0x180011100)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x180011130)
  • GetCurrentProcessId (Address: 0x180011128)
  • GetCurrentThreadId (Address: 0x180011110)
  • OpenProcessToken (Address: 0x180011120)
  • TerminateProcess (Address: 0x180011118)
api-ms-win-core-processthreads-l1-1-1.dll
  • OpenProcess (Address: 0x180011140)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x180011150)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x180011160)
  • RtlLookupFunctionEntry (Address: 0x180011168)
  • RtlVirtualUnwind (Address: 0x180011170)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x180011198)
  • AcquireSRWLockShared (Address: 0x1800111a8)
  • CreateMutexExW (Address: 0x1800111d0)
  • CreateSemaphoreExW (Address: 0x1800111e8)
  • DeleteCriticalSection (Address: 0x180011190)
  • EnterCriticalSection (Address: 0x1800111d8)
  • InitializeCriticalSectionEx (Address: 0x180011188)
  • LeaveCriticalSection (Address: 0x1800111b0)
  • OpenSemaphoreW (Address: 0x1800111f0)
  • ReleaseMutex (Address: 0x1800111b8)
  • ReleaseSemaphore (Address: 0x1800111c8)
  • ReleaseSRWLockExclusive (Address: 0x180011180)
  • ReleaseSRWLockShared (Address: 0x1800111c0)
  • WaitForSingleObject (Address: 0x1800111a0)
  • WaitForSingleObjectEx (Address: 0x1800111e0)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceExecuteOnce (Address: 0x180011208)
  • Sleep (Address: 0x180011200)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x180011220)
  • GetTickCount (Address: 0x180011218)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x180011240)
  • CreateThreadpoolTimer (Address: 0x180011230)
  • SetThreadpoolTimer (Address: 0x180011248)
  • WaitForThreadpoolTimerCallbacks (Address: 0x180011238)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x180011260)
  • EncodePointer (Address: 0x180011258)
api-ms-win-core-winrt-error-l1-1-0.dll
  • GetRestrictedErrorInfo (Address: 0x180011278)
  • RoOriginateError (Address: 0x180011270)
  • RoOriginateErrorW (Address: 0x180011280)
  • RoTransformError (Address: 0x180011290)
  • SetRestrictedErrorInfo (Address: 0x180011288)
api-ms-win-core-winrt-error-l1-1-1.dll
  • IsErrorPropagationEnabled (Address: 0x1800112a0)
  • RoGetMatchingRestrictedErrorInfo (Address: 0x1800112a8)
  • RoReportFailedDelegate (Address: 0x1800112b0)
api-ms-win-core-winrt-l1-1-0.dll
  • RoGetActivationFactory (Address: 0x1800112c0)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCreateString (Address: 0x1800112d0)
  • WindowsCreateStringReference (Address: 0x1800112f0)
  • WindowsGetStringRawBuffer (Address: 0x1800112e0)
  • WindowsIsStringEmpty (Address: 0x1800112e8)
  • WindowsStringHasEmbeddedNull (Address: 0x1800112d8)
api-ms-win-security-base-l1-1-0.dll
  • GetTokenInformation (Address: 0x180011300)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolAllowThreadReuse (Address: 0x180011318)
  • SHTaskPoolQueueTask (Address: 0x180011310)
msvcrt.dll
  • __C_specific_handler (Address: 0x180011330)
  • __CxxFrameHandler3 (Address: 0x180011328)
  • __dllonexit (Address: 0x180011398)
  • _amsg_exit (Address: 0x180011350)
  • _callnewh (Address: 0x1800113b0)
  • _get_errno (Address: 0x180011370)
  • _initterm (Address: 0x180011340)
  • _lock (Address: 0x180011338)
  • _onexit (Address: 0x1800113a8)
  • _purecall (Address: 0x180011388)
  • _set_errno (Address: 0x180011378)
  • _unlock (Address: 0x180011380)
  • _vsnwprintf (Address: 0x1800113a0)
  • _XcptFilter (Address: 0x180011358)
  • free (Address: 0x180011360)
  • malloc (Address: 0x180011348)
  • memcmp (Address: 0x1800113b8)
  • memcpy_s (Address: 0x180011390)
  • memmove_s (Address: 0x180011368)
  • memset (Address: 0x1800113c0)
SHELL32.dll
  • (Address: 0x180010fa0)
  • SHCreateItemFromParsingName (Address: 0x180010f98)
  • SHGetKnownFolderItem (Address: 0x180010f90)
SHLWAPI.dll
  • PathFileExistsW (Address: 0x180010fb0)
SspiCli.dll
  • GetUserNameExW (Address: 0x180010fc0)