aeinv.dll
v10.0.19041.6392
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 9
CreateAppxPackageInventory
#1 · 0x5f1c0
CreateAppxPackageInventoryExtracted
#2 · 0x5f970
CreateSoftwareInventory
#3 · 0x60230
GetAppInfo
#4 · 0xc770
GetAppInventory
#5 · 0x61890
GetCachedAppInventory
#6 · 0xdb70
GetDetailedAppInventory
#7 · 0x644b0
GetDetailedAppInventoryFile
#8 · 0x65e60
UpdateSoftwareInventoryW
#9 · 0x674c0
No function matches your filter.
Imported DLLs & functions 389
ADVAPI32.dll
36
ConvertSidToStringSidW
0x1800a9940
CryptAcquireContextW
0x1800a9928
CryptCreateHash
0x1800a9920
CryptDestroyHash
0x1800a9908
CryptGetHashParam
0x1800a9910
CryptHashData
0x1800a9918
CryptReleaseContext
0x1800a9900
EventRegister
0x1800a98f8
EventUnregister
0x1800a9830
EventWriteTransfer
0x1800a98d0
GetTokenInformation
0x1800a9938
InitializeSecurityDescriptor
0x1800a9840
RegCloseKey
0x1800a9870
RegCreateKeyExW
0x1800a98a8
RegDeleteKeyExW
0x1800a98b8
RegDeleteKeyValueW
0x1800a9858
RegDeleteKeyW
0x1800a98d8
RegDeleteTreeW
0x1800a9890
RegDeleteValueW
0x1800a9868
RegEnumKeyExW
0x1800a9898
RegFlushKey
0x1800a98c8
RegGetValueW
0x1800a98f0
RegLoadAppKeyW
0x1800a98c0
RegLoadKeyW
0x1800a98e0
RegOpenKeyExW
0x1800a9880
RegOpenKeyW
0x1800a9860
RegQueryInfoKeyW
0x1800a9888
RegSaveKeyExW
0x1800a98a0
RegSetKeySecurity
0x1800a9850
RegSetKeyValueW
0x1800a98b0
RegSetValueExW
0x1800a9878
RegUnLoadKeyW
0x1800a98e8
SetEntriesInAclW
0x1800a9838
SetSecurityDescriptorDacl
0x1800a9848
SetSecurityDescriptorOwner
0x1800a9948
TraceEvent
0x1800a9930
BCryptCloseAlgorithmProvider
0x1800a9e60
BCryptCreateHash
0x1800a9e70
BCryptDestroyHash
0x1800a9e68
BCryptFinishHash
0x1800a9e78
BCryptGetProperty
0x1800a9e80
BCryptHashData
0x1800a9e90
BCryptOpenAlgorithmProvider
0x1800a9e88
CertDuplicateCertificateContext
0x1800a9968
CertFreeCertificateContext
0x1800a9960
CertGetCertificateContextProperty
0x1800a9970
CertGetNameStringW
0x1800a9958
KERNEL32.dll
119
AcquireSRWLockExclusive
0x1800a99d8
AcquireSRWLockShared
0x1800a99f8
CloseHandle
0x1800a9ac8
CloseThreadpoolTimer
0x1800a99d0
CreateActCtxW
0x1800a9c88
CreateEventW
0x1800a9c20
CreateFileMappingW
0x1800a9cb8
CreateFileW
0x1800a9b68
CreateMutexExW
0x1800a9af8
CreateMutexW
0x1800a9bc0
CreateSemaphoreExW
0x1800a9a90
CreateSemaphoreW
0x1800a9c78
CreateThreadpoolTimer
0x1800a9a08
CreateWaitableTimerW
0x1800a9c58
DebugBreak
0x1800a9b00
DecodePointer
0x1800a9d18
DelayLoadFailureHook
0x1800a9cf0
DeleteCriticalSection
0x1800a9ae0
DeleteFileW
0x1800a9ba8
DeviceIoControl
0x1800a9c30
EncodePointer
0x1800a9d10
EnterCriticalSection
0x1800a9ad8
ExpandEnvironmentStringsW
0x1800a9b98
FileTimeToLocalFileTime
0x1800a9bf0
FileTimeToSystemTime
0x1800a9be8
FindClose
0x1800a9bb8
FindFirstFileW
0x1800a9ba0
FindNextFileW
0x1800a9bb0
FormatMessageW
0x1800a99b8
FreeEnvironmentStringsW
0x1800a9980
FreeLibrary
0x1800a9a50
GetCommandLineW
0x1800a9bd8
GetCurrentDirectoryW
0x1800a9c08
GetCurrentProcess
0x1800a9b20
GetCurrentProcessId
0x1800a9b38
GetCurrentThread
0x1800a9a68
GetCurrentThreadId
0x1800a99b0
GetDriveTypeW
0x1800a9c10
GetEnvironmentStringsW
0x1800a9988
GetFileAttributesW
0x1800a9b80
GetFileSize
0x1800a9cb0
GetFileTime
0x1800a9c28
GetLastError
0x1800a99c0
GetLogicalDriveStringsW
0x1800a9ca0
GetLongPathNameW
0x1800a9bf8
GetModuleFileNameA
0x1800a9a38
GetModuleFileNameW
0x1800a9b60
GetModuleHandleExA
0x1800a9a30
GetModuleHandleExW
0x1800a9a78
GetModuleHandleW
0x1800a9a10
GetProcAddress
0x1800a9a28
GetProcessHeap
0x1800a9a00
GetStringTypeW
0x1800a9d08
GetSystemDirectoryA
0x1800a9a40
GetSystemDirectoryW
0x1800a99c8
GetSystemFirmwareTable
0x1800a9c80
GetSystemInfo
0x1800a9c18
GetSystemPowerStatus
0x1800a9ac0
GetSystemTimeAsFileTime
0x1800a9b40
GetSystemWindowsDirectoryW
0x1800a9d30
GetTempFileNameW
0x1800a9bd0
GetTempPathW
0x1800a9bc8
GetTickCount
0x1800a9a58
GetVolumeInformationByHandleW
0x1800a9c38
HeapAlloc
0x1800a99f0
HeapFree
0x1800a9998
HeapReAlloc
0x1800a9b90
InitializeCriticalSection
0x1800a9ae8
InitializeCriticalSectionEx
0x1800a9aa0
InitOnceExecuteOnce
0x1800a9990
IsDebuggerPresent
0x1800a9a20
K32EnumProcesses
0x1800a9cd0
LeaveCriticalSection
0x1800a9ad0
LoadLibraryA
0x1800a9a48
LoadLibraryExA
0x1800a9ce8
LoadLibraryExW
0x1800a9b78
LoadLibraryW
0x1800a9a88
LocalAlloc
0x1800a9c00
LocaleNameToLCID
0x1800a9c48
LocalFree
0x1800a9b08
MapViewOfFile
0x1800a9cc0
MoveFileExW
0x1800a9be0
MultiByteToWideChar
0x1800a9d00
OpenProcess
0x1800a9cd8
OpenSemaphoreW
0x1800a9af0
OpenWaitableTimerW
0x1800a9c68
OutputDebugStringA
0x1800a9b58
OutputDebugStringW
0x1800a9a18
QueryActCtxW
0x1800a9c90
QueryDosDeviceW
0x1800a9ca8
QueryFullProcessImageNameW
0x1800a9ce0
QueryPerformanceCounter
0x1800a9b30
QueryThreadCycleTime
0x1800a9a60
RaiseException
0x1800a9c40
ReleaseActCtx
0x1800a9c98
ReleaseMutex
0x1800a9ab0
ReleaseSemaphore
0x1800a9a98
ReleaseSRWLockExclusive
0x1800a9b88
ReleaseSRWLockShared
0x1800a99e8
SetEvent
0x1800a9c70
SetLastError
0x1800a99a0
SetNamedPipeHandleState
0x1800a9b48
SetThreadpoolTimer
0x1800a99e0
SetUnhandledExceptionFilter
0x1800a9b18
SetWaitableTimer
0x1800a9c50
Sleep
0x1800a9a70
SleepConditionVariableSRW
0x1800a9d28
TerminateProcess
0x1800a9b28
UnhandledExceptionFilter
0x1800a9b10
UnmapViewOfFile
0x1800a9cc8
VerifyVersionInfoW
0x1800a9a80
WaitForMultipleObjects
0x1800a9c60
WaitForSingleObject
0x1800a9aa8
WaitForSingleObjectEx
0x1800a9ab8
WaitForThreadpoolTimerCallbacks
0x1800a99a8
WaitNamedPipeW
0x1800a9b70
WakeAllConditionVariable
0x1800a9d20
WideCharToMultiByte
0x1800a9cf8
WriteFile
0x1800a9b50
msi.dll
14
0x1800a9ea0
0x1800a9ea8
0x1800a9eb0
0x1800a9eb8
0x1800a9ec8
0x1800a9ed0
0x1800a9ed8
0x1800a9ee0
0x1800a9ee8
0x1800a9ef0
0x1800a9ef8
0x1800a9f00
0x1800a9f08
0x1800a9ec0
msvcrt.dll
102
___lc_codepage_func
0x1800aa178
___lc_collate_cp_func
0x1800aa158
___lc_handle_func
0x1800aa180
___mb_cur_max_func
0x1800aa188
__C_specific_handler
0x1800aa0c8
__crtCompareStringW
0x1800aa150
__crtLCMapStringW
0x1800aa160
__CxxFrameHandler3
0x1800aa240
__dllonexit
0x1800aa0a8
__mb_cur_max
0x1800aa070
__pctype_func
0x1800aa170
_amsg_exit
0x1800aa128
_CxxThrowException
0x1800aa138
_errno
0x1800aa1e0
_fseeki64
0x1800aa060
_initterm
0x1800aa0d0
_lock
0x1800aa0b8
_mktime64
0x1800a9f58
_onexit
0x1800aa0a0
_purecall
0x1800aa1b0
_set_errno
0x1800aa1d0
_strnicmp
0x1800aa1f8
_unlock
0x1800aa0b0
_vscwprintf
0x1800a9f48
_vsnprintf
0x1800aa198
_vsnprintf_s
0x1800aa208
_vsnwprintf
0x1800aa230
_vsnwprintf_s
0x1800a9f50
_wcsicmp
0x1800aa1a0
_wcslwr
0x1800a9f88
_wcsnicmp
0x1800aa1a8
_wctime64
0x1800a9f60
_wfsopen
0x1800aa110
_wsplitpath_s
0x1800aa008
_wtoi
0x1800a9f38
_wtoi64
0x1800a9ff8
_XcptFilter
0x1800aa130
??0bad_cast@@QEAA@AEBV0@@Z
0x1800a9fc0
??0bad_cast@@QEAA@PEBD@Z
0x1800a9fd8
??0exception@@QEAA@AEBQEBD@Z
0x1800aa1b8
??0exception@@QEAA@AEBQEBDH@Z
0x1800aa100
??0exception@@QEAA@AEBV0@@Z
0x1800aa210
??0exception@@QEAA@XZ
0x1800aa218
??1bad_cast@@UEAA@XZ
0x1800a9fd0
??1exception@@UEAA@XZ
0x1800aa220
??1type_info@@UEAA@XZ
0x1800aa098
?terminate@@YAXXZ
0x1800aa0c0
?what@exception@@UEBAPEBDXZ
0x1800aa1c0
abort
0x1800aa108
calloc
0x1800aa168
fclose
0x1800aa0e0
fflush
0x1800aa048
fgetc
0x1800aa020
fgetpos
0x1800aa068
fgetwc
0x1800aa028
fputwc
0x1800aa030
free
0x1800aa120
fseek
0x1800aa140
fsetpos
0x1800aa058
fwrite
0x1800aa0d8
iscntrl
0x1800a9f30
isdigit
0x1800aa0e8
isspace
0x1800a9f20
iswalpha
0x1800aa078
iswcntrl
0x1800a9f18
iswspace
0x1800a9f28
malloc
0x1800aa118
memcmp
0x1800aa148
memcpy
0x1800aa0f8
memcpy_s
0x1800aa228
memmove
0x1800aa238
memmove_s
0x1800a9fb0
memset
0x1800aa088
realloc
0x1800a9fe0
setlocale
0x1800aa0f0
setvbuf
0x1800aa050
sprintf_s
0x1800aa1f0
strchr
0x1800aa1c8
strcmp
0x1800aa090
strcpy_s
0x1800a9fb8
strerror
0x1800a9fc8
strncmp
0x1800a9f68
strncpy_s
0x1800aa1e8
strnlen
0x1800aa000
strrchr
0x1800aa200
strtol
0x1800aa1d8
tolower
0x1800a9f40
toupper
0x1800a9f70
towlower
0x1800a9ff0
ungetc
0x1800aa038
ungetwc
0x1800aa040
wcscat_s
0x1800a9f90
wcschr
0x1800a9fa8
wcscmp
0x1800a9f78
wcscpy_s
0x1800a9f98
wcsncmp
0x1800aa190
wcsrchr
0x1800a9fa0
wcsspn
0x1800aa080
wcsstr
0x1800a9f80
wcstok_s
0x1800aa018
wcstombs
0x1800a9fe8
wcstoul
0x1800aa010
ntdll.dll
71
EtwEventRegister
0x1800aa338
EtwEventUnregister
0x1800aa348
EtwEventWrite
0x1800aa340
EtwEventWriteNoRegistration
0x1800aa468
EtwTraceMessage
0x1800aa250
LdrResSearchResource
0x1800aa2c0
NtLoadKeyEx
0x1800aa268
NtQueryKey
0x1800aa288
NtQueryLicenseValue
0x1800aa258
RtlAdjustPrivilege
0x1800aa2a8
RtlAllocateAndInitializeSid
0x1800aa298
RtlAllocateHeap
0x1800aa418
RtlAnsiStringToUnicodeString
0x1800aa320
RtlAppendUnicodeStringToString
0x1800aa390
RtlAppendUnicodeToString
0x1800aa388
RtlCaptureContext
0x1800aa470
RtlCompareMemory
0x1800aa438
RtlComputeCrc32
0x1800aa430
RtlCopyUnicodeString
0x1800aa460
RtlDeleteCriticalSection
0x1800aa420
RtlDosPathNameToNtPathName_U_WithStatus
0x1800aa3c8
RtlDosPathNameToRelativeNtPathName_U
0x1800aa270
RtlEnterCriticalSection
0x1800aa400
RtlEqualString
0x1800aa410
RtlFormatCurrentUserKeyPath
0x1800aa380
RtlFreeHeap
0x1800aa3e0
RtlFreeSid
0x1800aa290
RtlFreeUnicodeString
0x1800aa3b0
RtlGetNativeSystemInformation
0x1800aa2e8
RtlGetVersion
0x1800aa440
RtlImageDirectoryEntryToData
0x1800aa2b0
RtlInitAnsiString
0x1800aa3f8
RtlInitializeCriticalSection
0x1800aa3e8
RtlInitString
0x1800aa330
RtlInitUnicodeString
0x1800aa3c0
RtlInitUnicodeStringEx
0x1800aa3a0
RtlLeaveCriticalSection
0x1800aa3d8
RtlLookupFunctionEntry
0x1800aa480
RtlMultiByteToUnicodeN
0x1800aa3f0
RtlNtPathNameToDosPathName
0x1800aa2f0
RtlNtStatusToDosError
0x1800aa2a0
RtlpEnsureBufferSize
0x1800aa2f8
RtlRandomEx
0x1800aa280
RtlReAllocateHeap
0x1800aa408
RtlReleaseRelativeName
0x1800aa260
RtlRunOnceExecuteOnce
0x1800aa458
RtlSecondsSince1970ToTime
0x1800aa350
RtlStringFromGUID
0x1800aa278
RtlTimeToTimeFields
0x1800aa2c8
RtlUnicodeStringToAnsiString
0x1800aa310
RtlUpcaseUnicodeChar
0x1800aa308
RtlUpcaseUnicodeString
0x1800aa318
RtlVerifyVersionInfo
0x1800aa2b8
RtlVirtualUnwind
0x1800aa478
RtlxAnsiStringToUnicodeSize
0x1800aa328
VerSetConditionMask
0x1800aa448
WinSqmIsOptedInEx
0x1800aa450
ZwClose
0x1800aa3d0
ZwCreateFile
0x1800aa378
ZwCreateSection
0x1800aa368
ZwEnumerateKey
0x1800aa3a8
ZwMapViewOfSection
0x1800aa2d0
ZwOpenFile
0x1800aa3b8
ZwOpenKey
0x1800aa428
ZwQueryDirectoryFile
0x1800aa300
ZwQueryInformationFile
0x1800aa370
ZwQueryInformationProcess
0x1800aa360
ZwQuerySystemInformation
0x1800aa2e0
ZwQueryValueKey
0x1800aa398
ZwSetInformationProcess
0x1800aa358
ZwUnmapViewOfSection
0x1800aa2d8
CoCreateInstance
0x1800aa4b0
CoInitializeEx
0x1800aa4a0
CoTaskMemAlloc
0x1800aa4b8
CoTaskMemFree
0x1800aa490
CoUninitialize
0x1800aa498
PropVariantClear
0x1800aa4a8
SysAllocString
0x1800a9d40
SysFreeString
0x1800a9d48
SysStringLen
0x1800a9d70
VariantChangeType
0x1800a9d50
VariantClear
0x1800a9d68
VariantCopy
0x1800a9d60
VariantInit
0x1800a9d58
UuidCreate
0x1800a9d80
CommandLineToArgvW
0x1800a9d98
SHCreateItemFromIDList
0x1800a9d90
SHCreateItemFromParsingName
0x1800a9db0
SHGetFolderPathW
0x1800a9da8
SHGetKnownFolderPath
0x1800a9da0
0x1800a9de0
PathCommonPrefixW
0x1800a9de8
PathFileExistsW
0x1800a9dd0
PathFindFileNameW
0x1800a9df0
PathIsNetworkPathW
0x1800a9dd8
PathUnExpandEnvStringsW
0x1800a9dc8
SHCreateStreamOnFileEx
0x1800a9dc0
CryptCATAdminAcquireContext
0x1800a9e18
CryptCATAdminCalcHashFromFileHandle
0x1800a9e30
CryptCATAdminEnumCatalogFromHash
0x1800a9e10
CryptCATAdminReleaseCatalogContext
0x1800a9e40
CryptCATAdminReleaseContext
0x1800a9e38
CryptCATCatalogInfoFromContext
0x1800a9e28
WinVerifyTrust
0x1800a9e08
WTHelperGetProvSignerFromChain
0x1800a9e20
WTHelperProvDataFromStateData
0x1800a9e00
CreateXmlReader
0x1800a9e50
No function matches your filter.