aeinv.dll

Description: Application Inventory Component

Version: 10.0.19041.6392

Architecture: 64-bit

Operating System: Windows NT

SHA256: cc554dc5bfd12ea1a6b5fdf7889677cb

File Size: 963.4 KB

Uploaded At: Dec. 1, 2025, 7:21 a.m.

Views: 13

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

CreateAppxPackageInventory (Ordinal: 1, Address: 0x5f1c0)
CreateAppxPackageInventoryExtracted (Ordinal: 2, Address: 0x5f970)
CreateSoftwareInventory (Ordinal: 3, Address: 0x60230)
GetAppInfo (Ordinal: 4, Address: 0xc770)
GetAppInventory (Ordinal: 5, Address: 0x61890)
GetCachedAppInventory (Ordinal: 6, Address: 0xdb70)
GetDetailedAppInventory (Ordinal: 7, Address: 0x644b0)
GetDetailedAppInventoryFile (Ordinal: 8, Address: 0x65e60)
UpdateSoftwareInventoryW (Ordinal: 9, Address: 0x674c0)

Imported DLLs & Functions

ADVAPI32.dll

ConvertSidToStringSidW (Address: 0x1800a9940)
CryptAcquireContextW (Address: 0x1800a9928)
CryptCreateHash (Address: 0x1800a9920)
CryptDestroyHash (Address: 0x1800a9908)
CryptGetHashParam (Address: 0x1800a9910)
CryptHashData (Address: 0x1800a9918)
CryptReleaseContext (Address: 0x1800a9900)
EventRegister (Address: 0x1800a98f8)
EventUnregister (Address: 0x1800a9830)
EventWriteTransfer (Address: 0x1800a98d0)
GetTokenInformation (Address: 0x1800a9938)
InitializeSecurityDescriptor (Address: 0x1800a9840)
RegCloseKey (Address: 0x1800a9870)
RegCreateKeyExW (Address: 0x1800a98a8)
RegDeleteKeyExW (Address: 0x1800a98b8)
RegDeleteKeyValueW (Address: 0x1800a9858)
RegDeleteKeyW (Address: 0x1800a98d8)
RegDeleteTreeW (Address: 0x1800a9890)
RegDeleteValueW (Address: 0x1800a9868)
RegEnumKeyExW (Address: 0x1800a9898)
RegFlushKey (Address: 0x1800a98c8)
RegGetValueW (Address: 0x1800a98f0)
RegLoadAppKeyW (Address: 0x1800a98c0)
RegLoadKeyW (Address: 0x1800a98e0)
RegOpenKeyExW (Address: 0x1800a9880)
RegOpenKeyW (Address: 0x1800a9860)
RegQueryInfoKeyW (Address: 0x1800a9888)
RegSaveKeyExW (Address: 0x1800a98a0)
RegSetKeySecurity (Address: 0x1800a9850)
RegSetKeyValueW (Address: 0x1800a98b0)
RegSetValueExW (Address: 0x1800a9878)
RegUnLoadKeyW (Address: 0x1800a98e8)
SetEntriesInAclW (Address: 0x1800a9838)
SetSecurityDescriptorDacl (Address: 0x1800a9848)
SetSecurityDescriptorOwner (Address: 0x1800a9948)
TraceEvent (Address: 0x1800a9930)

bcrypt.dll

BCryptCloseAlgorithmProvider (Address: 0x1800a9e60)
BCryptCreateHash (Address: 0x1800a9e70)
BCryptDestroyHash (Address: 0x1800a9e68)
BCryptFinishHash (Address: 0x1800a9e78)
BCryptGetProperty (Address: 0x1800a9e80)
BCryptHashData (Address: 0x1800a9e90)
BCryptOpenAlgorithmProvider (Address: 0x1800a9e88)

CRYPT32.dll

CertDuplicateCertificateContext (Address: 0x1800a9968)
CertFreeCertificateContext (Address: 0x1800a9960)
CertGetCertificateContextProperty (Address: 0x1800a9970)
CertGetNameStringW (Address: 0x1800a9958)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x1800a99d8)
AcquireSRWLockShared (Address: 0x1800a99f8)
CloseHandle (Address: 0x1800a9ac8)
CloseThreadpoolTimer (Address: 0x1800a99d0)
CreateActCtxW (Address: 0x1800a9c88)
CreateEventW (Address: 0x1800a9c20)
CreateFileMappingW (Address: 0x1800a9cb8)
CreateFileW (Address: 0x1800a9b68)
CreateMutexExW (Address: 0x1800a9af8)
CreateMutexW (Address: 0x1800a9bc0)
CreateSemaphoreExW (Address: 0x1800a9a90)
CreateSemaphoreW (Address: 0x1800a9c78)
CreateThreadpoolTimer (Address: 0x1800a9a08)
CreateWaitableTimerW (Address: 0x1800a9c58)
DebugBreak (Address: 0x1800a9b00)
DecodePointer (Address: 0x1800a9d18)
DelayLoadFailureHook (Address: 0x1800a9cf0)
DeleteCriticalSection (Address: 0x1800a9ae0)
DeleteFileW (Address: 0x1800a9ba8)
DeviceIoControl (Address: 0x1800a9c30)
EncodePointer (Address: 0x1800a9d10)
EnterCriticalSection (Address: 0x1800a9ad8)
ExpandEnvironmentStringsW (Address: 0x1800a9b98)
FileTimeToLocalFileTime (Address: 0x1800a9bf0)
FileTimeToSystemTime (Address: 0x1800a9be8)
FindClose (Address: 0x1800a9bb8)
FindFirstFileW (Address: 0x1800a9ba0)
FindNextFileW (Address: 0x1800a9bb0)
FormatMessageW (Address: 0x1800a99b8)
FreeEnvironmentStringsW (Address: 0x1800a9980)
FreeLibrary (Address: 0x1800a9a50)
GetCommandLineW (Address: 0x1800a9bd8)
GetCurrentDirectoryW (Address: 0x1800a9c08)
GetCurrentProcess (Address: 0x1800a9b20)
GetCurrentProcessId (Address: 0x1800a9b38)
GetCurrentThread (Address: 0x1800a9a68)
GetCurrentThreadId (Address: 0x1800a99b0)
GetDriveTypeW (Address: 0x1800a9c10)
GetEnvironmentStringsW (Address: 0x1800a9988)
GetFileAttributesW (Address: 0x1800a9b80)
GetFileSize (Address: 0x1800a9cb0)
GetFileTime (Address: 0x1800a9c28)
GetLastError (Address: 0x1800a99c0)
GetLogicalDriveStringsW (Address: 0x1800a9ca0)
GetLongPathNameW (Address: 0x1800a9bf8)
GetModuleFileNameA (Address: 0x1800a9a38)
GetModuleFileNameW (Address: 0x1800a9b60)
GetModuleHandleExA (Address: 0x1800a9a30)
GetModuleHandleExW (Address: 0x1800a9a78)
GetModuleHandleW (Address: 0x1800a9a10)
GetProcAddress (Address: 0x1800a9a28)
GetProcessHeap (Address: 0x1800a9a00)
GetStringTypeW (Address: 0x1800a9d08)
GetSystemDirectoryA (Address: 0x1800a9a40)
GetSystemDirectoryW (Address: 0x1800a99c8)
GetSystemFirmwareTable (Address: 0x1800a9c80)
GetSystemInfo (Address: 0x1800a9c18)
GetSystemPowerStatus (Address: 0x1800a9ac0)
GetSystemTimeAsFileTime (Address: 0x1800a9b40)
GetSystemWindowsDirectoryW (Address: 0x1800a9d30)
GetTempFileNameW (Address: 0x1800a9bd0)
GetTempPathW (Address: 0x1800a9bc8)
GetTickCount (Address: 0x1800a9a58)
GetVolumeInformationByHandleW (Address: 0x1800a9c38)
HeapAlloc (Address: 0x1800a99f0)
HeapFree (Address: 0x1800a9998)
HeapReAlloc (Address: 0x1800a9b90)
InitializeCriticalSection (Address: 0x1800a9ae8)
InitializeCriticalSectionEx (Address: 0x1800a9aa0)
InitOnceExecuteOnce (Address: 0x1800a9990)
IsDebuggerPresent (Address: 0x1800a9a20)
K32EnumProcesses (Address: 0x1800a9cd0)
LeaveCriticalSection (Address: 0x1800a9ad0)
LoadLibraryA (Address: 0x1800a9a48)
LoadLibraryExA (Address: 0x1800a9ce8)
LoadLibraryExW (Address: 0x1800a9b78)
LoadLibraryW (Address: 0x1800a9a88)
LocalAlloc (Address: 0x1800a9c00)
LocaleNameToLCID (Address: 0x1800a9c48)
LocalFree (Address: 0x1800a9b08)
MapViewOfFile (Address: 0x1800a9cc0)
MoveFileExW (Address: 0x1800a9be0)
MultiByteToWideChar (Address: 0x1800a9d00)
OpenProcess (Address: 0x1800a9cd8)
OpenSemaphoreW (Address: 0x1800a9af0)
OpenWaitableTimerW (Address: 0x1800a9c68)
OutputDebugStringA (Address: 0x1800a9b58)
OutputDebugStringW (Address: 0x1800a9a18)
QueryActCtxW (Address: 0x1800a9c90)
QueryDosDeviceW (Address: 0x1800a9ca8)
QueryFullProcessImageNameW (Address: 0x1800a9ce0)
QueryPerformanceCounter (Address: 0x1800a9b30)
QueryThreadCycleTime (Address: 0x1800a9a60)
RaiseException (Address: 0x1800a9c40)
ReleaseActCtx (Address: 0x1800a9c98)
ReleaseMutex (Address: 0x1800a9ab0)
ReleaseSemaphore (Address: 0x1800a9a98)
ReleaseSRWLockExclusive (Address: 0x1800a9b88)
ReleaseSRWLockShared (Address: 0x1800a99e8)
SetEvent (Address: 0x1800a9c70)
SetLastError (Address: 0x1800a99a0)
SetNamedPipeHandleState (Address: 0x1800a9b48)
SetThreadpoolTimer (Address: 0x1800a99e0)
SetUnhandledExceptionFilter (Address: 0x1800a9b18)
SetWaitableTimer (Address: 0x1800a9c50)
Sleep (Address: 0x1800a9a70)
SleepConditionVariableSRW (Address: 0x1800a9d28)
TerminateProcess (Address: 0x1800a9b28)
UnhandledExceptionFilter (Address: 0x1800a9b10)
UnmapViewOfFile (Address: 0x1800a9cc8)
VerifyVersionInfoW (Address: 0x1800a9a80)
WaitForMultipleObjects (Address: 0x1800a9c60)
WaitForSingleObject (Address: 0x1800a9aa8)
WaitForSingleObjectEx (Address: 0x1800a9ab8)
WaitForThreadpoolTimerCallbacks (Address: 0x1800a99a8)
WaitNamedPipeW (Address: 0x1800a9b70)
WakeAllConditionVariable (Address: 0x1800a9d20)
WideCharToMultiByte (Address: 0x1800a9cf8)
WriteFile (Address: 0x1800a9b50)

msi.dll

(Address: 0x1800a9ea0)
(Address: 0x1800a9ea8)
(Address: 0x1800a9eb0)
(Address: 0x1800a9eb8)
(Address: 0x1800a9ec8)
(Address: 0x1800a9ed0)
(Address: 0x1800a9ed8)
(Address: 0x1800a9ee0)
(Address: 0x1800a9ee8)
(Address: 0x1800a9ef0)
(Address: 0x1800a9ef8)
(Address: 0x1800a9f00)
(Address: 0x1800a9f08)
(Address: 0x1800a9ec0)

msvcrt.dll

___lc_codepage_func (Address: 0x1800aa178)
___lc_collate_cp_func (Address: 0x1800aa158)
___lc_handle_func (Address: 0x1800aa180)
___mb_cur_max_func (Address: 0x1800aa188)
__C_specific_handler (Address: 0x1800aa0c8)
__crtCompareStringW (Address: 0x1800aa150)
__crtLCMapStringW (Address: 0x1800aa160)
__CxxFrameHandler3 (Address: 0x1800aa240)
__dllonexit (Address: 0x1800aa0a8)
__mb_cur_max (Address: 0x1800aa070)
__pctype_func (Address: 0x1800aa170)
_amsg_exit (Address: 0x1800aa128)
_CxxThrowException (Address: 0x1800aa138)
_errno (Address: 0x1800aa1e0)
_fseeki64 (Address: 0x1800aa060)
_initterm (Address: 0x1800aa0d0)
_lock (Address: 0x1800aa0b8)
_mktime64 (Address: 0x1800a9f58)
_onexit (Address: 0x1800aa0a0)
_purecall (Address: 0x1800aa1b0)
_set_errno (Address: 0x1800aa1d0)
_strnicmp (Address: 0x1800aa1f8)
_unlock (Address: 0x1800aa0b0)
_vscwprintf (Address: 0x1800a9f48)
_vsnprintf (Address: 0x1800aa198)
_vsnprintf_s (Address: 0x1800aa208)
_vsnwprintf (Address: 0x1800aa230)
_vsnwprintf_s (Address: 0x1800a9f50)
_wcsicmp (Address: 0x1800aa1a0)
_wcslwr (Address: 0x1800a9f88)
_wcsnicmp (Address: 0x1800aa1a8)
_wctime64 (Address: 0x1800a9f60)
_wfsopen (Address: 0x1800aa110)
_wsplitpath_s (Address: 0x1800aa008)
_wtoi (Address: 0x1800a9f38)
_wtoi64 (Address: 0x1800a9ff8)
_XcptFilter (Address: 0x1800aa130)
??0bad_cast@@QEAA@AEBV0@@Z (Address: 0x1800a9fc0)
??0bad_cast@@QEAA@PEBD@Z (Address: 0x1800a9fd8)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x1800aa1b8)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x1800aa100)
??0exception@@QEAA@AEBV0@@Z (Address: 0x1800aa210)
??0exception@@QEAA@XZ (Address: 0x1800aa218)
??1bad_cast@@UEAA@XZ (Address: 0x1800a9fd0)
??1exception@@UEAA@XZ (Address: 0x1800aa220)
??1type_info@@UEAA@XZ (Address: 0x1800aa098)
?terminate@@YAXXZ (Address: 0x1800aa0c0)
?what@exception@@UEBAPEBDXZ (Address: 0x1800aa1c0)
abort (Address: 0x1800aa108)
calloc (Address: 0x1800aa168)
fclose (Address: 0x1800aa0e0)
fflush (Address: 0x1800aa048)
fgetc (Address: 0x1800aa020)
fgetpos (Address: 0x1800aa068)
fgetwc (Address: 0x1800aa028)
fputwc (Address: 0x1800aa030)
free (Address: 0x1800aa120)
fseek (Address: 0x1800aa140)
fsetpos (Address: 0x1800aa058)
fwrite (Address: 0x1800aa0d8)
iscntrl (Address: 0x1800a9f30)
isdigit (Address: 0x1800aa0e8)
isspace (Address: 0x1800a9f20)
iswalpha (Address: 0x1800aa078)
iswcntrl (Address: 0x1800a9f18)
iswspace (Address: 0x1800a9f28)
malloc (Address: 0x1800aa118)
memcmp (Address: 0x1800aa148)
memcpy (Address: 0x1800aa0f8)
memcpy_s (Address: 0x1800aa228)
memmove (Address: 0x1800aa238)
memmove_s (Address: 0x1800a9fb0)
memset (Address: 0x1800aa088)
realloc (Address: 0x1800a9fe0)
setlocale (Address: 0x1800aa0f0)
setvbuf (Address: 0x1800aa050)
sprintf_s (Address: 0x1800aa1f0)
strchr (Address: 0x1800aa1c8)
strcmp (Address: 0x1800aa090)
strcpy_s (Address: 0x1800a9fb8)
strerror (Address: 0x1800a9fc8)
strncmp (Address: 0x1800a9f68)
strncpy_s (Address: 0x1800aa1e8)
strnlen (Address: 0x1800aa000)
strrchr (Address: 0x1800aa200)
strtol (Address: 0x1800aa1d8)
tolower (Address: 0x1800a9f40)
toupper (Address: 0x1800a9f70)
towlower (Address: 0x1800a9ff0)
ungetc (Address: 0x1800aa038)
ungetwc (Address: 0x1800aa040)
wcscat_s (Address: 0x1800a9f90)
wcschr (Address: 0x1800a9fa8)
wcscmp (Address: 0x1800a9f78)
wcscpy_s (Address: 0x1800a9f98)
wcsncmp (Address: 0x1800aa190)
wcsrchr (Address: 0x1800a9fa0)
wcsspn (Address: 0x1800aa080)
wcsstr (Address: 0x1800a9f80)
wcstok_s (Address: 0x1800aa018)
wcstombs (Address: 0x1800a9fe8)
wcstoul (Address: 0x1800aa010)

ntdll.dll

EtwEventRegister (Address: 0x1800aa338)
EtwEventUnregister (Address: 0x1800aa348)
EtwEventWrite (Address: 0x1800aa340)
EtwEventWriteNoRegistration (Address: 0x1800aa468)
EtwTraceMessage (Address: 0x1800aa250)
LdrResSearchResource (Address: 0x1800aa2c0)
NtLoadKeyEx (Address: 0x1800aa268)
NtQueryKey (Address: 0x1800aa288)
NtQueryLicenseValue (Address: 0x1800aa258)
RtlAdjustPrivilege (Address: 0x1800aa2a8)
RtlAllocateAndInitializeSid (Address: 0x1800aa298)
RtlAllocateHeap (Address: 0x1800aa418)
RtlAnsiStringToUnicodeString (Address: 0x1800aa320)
RtlAppendUnicodeStringToString (Address: 0x1800aa390)
RtlAppendUnicodeToString (Address: 0x1800aa388)
RtlCaptureContext (Address: 0x1800aa470)
RtlCompareMemory (Address: 0x1800aa438)
RtlComputeCrc32 (Address: 0x1800aa430)
RtlCopyUnicodeString (Address: 0x1800aa460)
RtlDeleteCriticalSection (Address: 0x1800aa420)
RtlDosPathNameToNtPathName_U_WithStatus (Address: 0x1800aa3c8)
RtlDosPathNameToRelativeNtPathName_U (Address: 0x1800aa270)
RtlEnterCriticalSection (Address: 0x1800aa400)
RtlEqualString (Address: 0x1800aa410)
RtlFormatCurrentUserKeyPath (Address: 0x1800aa380)
RtlFreeHeap (Address: 0x1800aa3e0)
RtlFreeSid (Address: 0x1800aa290)
RtlFreeUnicodeString (Address: 0x1800aa3b0)
RtlGetNativeSystemInformation (Address: 0x1800aa2e8)
RtlGetVersion (Address: 0x1800aa440)
RtlImageDirectoryEntryToData (Address: 0x1800aa2b0)
RtlInitAnsiString (Address: 0x1800aa3f8)
RtlInitializeCriticalSection (Address: 0x1800aa3e8)
RtlInitString (Address: 0x1800aa330)
RtlInitUnicodeString (Address: 0x1800aa3c0)
RtlInitUnicodeStringEx (Address: 0x1800aa3a0)
RtlLeaveCriticalSection (Address: 0x1800aa3d8)
RtlLookupFunctionEntry (Address: 0x1800aa480)
RtlMultiByteToUnicodeN (Address: 0x1800aa3f0)
RtlNtPathNameToDosPathName (Address: 0x1800aa2f0)
RtlNtStatusToDosError (Address: 0x1800aa2a0)
RtlpEnsureBufferSize (Address: 0x1800aa2f8)
RtlRandomEx (Address: 0x1800aa280)
RtlReAllocateHeap (Address: 0x1800aa408)
RtlReleaseRelativeName (Address: 0x1800aa260)
RtlRunOnceExecuteOnce (Address: 0x1800aa458)
RtlSecondsSince1970ToTime (Address: 0x1800aa350)
RtlStringFromGUID (Address: 0x1800aa278)
RtlTimeToTimeFields (Address: 0x1800aa2c8)
RtlUnicodeStringToAnsiString (Address: 0x1800aa310)
RtlUpcaseUnicodeChar (Address: 0x1800aa308)
RtlUpcaseUnicodeString (Address: 0x1800aa318)
RtlVerifyVersionInfo (Address: 0x1800aa2b8)
RtlVirtualUnwind (Address: 0x1800aa478)
RtlxAnsiStringToUnicodeSize (Address: 0x1800aa328)
VerSetConditionMask (Address: 0x1800aa448)
WinSqmIsOptedInEx (Address: 0x1800aa450)
ZwClose (Address: 0x1800aa3d0)
ZwCreateFile (Address: 0x1800aa378)
ZwCreateSection (Address: 0x1800aa368)
ZwEnumerateKey (Address: 0x1800aa3a8)
ZwMapViewOfSection (Address: 0x1800aa2d0)
ZwOpenFile (Address: 0x1800aa3b8)
ZwOpenKey (Address: 0x1800aa428)
ZwQueryDirectoryFile (Address: 0x1800aa300)
ZwQueryInformationFile (Address: 0x1800aa370)
ZwQueryInformationProcess (Address: 0x1800aa360)
ZwQuerySystemInformation (Address: 0x1800aa2e0)
ZwQueryValueKey (Address: 0x1800aa398)
ZwSetInformationProcess (Address: 0x1800aa358)
ZwUnmapViewOfSection (Address: 0x1800aa2d8)

ole32.dll

CoCreateInstance (Address: 0x1800aa4b0)
CoInitializeEx (Address: 0x1800aa4a0)
CoTaskMemAlloc (Address: 0x1800aa4b8)
CoTaskMemFree (Address: 0x1800aa490)
CoUninitialize (Address: 0x1800aa498)
PropVariantClear (Address: 0x1800aa4a8)

OLEAUT32.dll

SysAllocString (Address: 0x1800a9d40)
SysFreeString (Address: 0x1800a9d48)
SysStringLen (Address: 0x1800a9d70)
VariantChangeType (Address: 0x1800a9d50)
VariantClear (Address: 0x1800a9d68)
VariantCopy (Address: 0x1800a9d60)
VariantInit (Address: 0x1800a9d58)

RPCRT4.dll

UuidCreate (Address: 0x1800a9d80)

SHELL32.dll

CommandLineToArgvW (Address: 0x1800a9d98)
SHCreateItemFromIDList (Address: 0x1800a9d90)
SHCreateItemFromParsingName (Address: 0x1800a9db0)
SHGetFolderPathW (Address: 0x1800a9da8)
SHGetKnownFolderPath (Address: 0x1800a9da0)

SHLWAPI.dll

(Address: 0x1800a9de0)
PathCommonPrefixW (Address: 0x1800a9de8)
PathFileExistsW (Address: 0x1800a9dd0)
PathFindFileNameW (Address: 0x1800a9df0)
PathIsNetworkPathW (Address: 0x1800a9dd8)
PathUnExpandEnvStringsW (Address: 0x1800a9dc8)
SHCreateStreamOnFileEx (Address: 0x1800a9dc0)

WINTRUST.dll

CryptCATAdminAcquireContext (Address: 0x1800a9e18)
CryptCATAdminCalcHashFromFileHandle (Address: 0x1800a9e30)
CryptCATAdminEnumCatalogFromHash (Address: 0x1800a9e10)
CryptCATAdminReleaseCatalogContext (Address: 0x1800a9e40)
CryptCATAdminReleaseContext (Address: 0x1800a9e38)
CryptCATCatalogInfoFromContext (Address: 0x1800a9e28)
WinVerifyTrust (Address: 0x1800a9e08)
WTHelperGetProvSignerFromChain (Address: 0x1800a9e20)
WTHelperProvDataFromStateData (Address: 0x1800a9e00)

XmlLite.dll

CreateXmlReader (Address: 0x1800a9e50)