aeinv.dll
Description: Application Inventory Component
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19645.1121
Architecture: 64-bit
Operating System: Windows NT
SHA256: 94fd850abe38ebf17c996f9fa17ca750
File Size: 901.4 KB
Uploaded At: Dec. 1, 2025, 7:46 a.m.
Views: 8
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- CreateAppxPackageInventory (Ordinal: 1, Address: 0x56b40)
- CreateAppxPackageInventoryExtracted (Ordinal: 2, Address: 0x56e90)
- CreateSoftwareInventory (Ordinal: 3, Address: 0x572d0)
- GetAppInfo (Ordinal: 4, Address: 0xc1d0)
- GetAppInventory (Ordinal: 5, Address: 0x58500)
- GetCachedAppInventory (Ordinal: 6, Address: 0xcfb0)
- GetDetailedAppInventory (Ordinal: 7, Address: 0x5a890)
- GetDetailedAppInventoryFile (Ordinal: 8, Address: 0x5c070)
- UpdateSoftwareInventoryW (Ordinal: 9, Address: 0x5ccc0)
Imported DLLs & Functions
ADVAPI32.dll
- ConvertSidToStringSidW (Address: 0x180097140)
- CryptAcquireContextW (Address: 0x180097158)
- CryptCreateHash (Address: 0x180097160)
- CryptDestroyHash (Address: 0x180097178)
- CryptGetHashParam (Address: 0x180097170)
- CryptHashData (Address: 0x180097168)
- CryptReleaseContext (Address: 0x180097180)
- EventRegister (Address: 0x180097198)
- EventUnregister (Address: 0x180097080)
- EventWriteTransfer (Address: 0x180097188)
- GetTokenInformation (Address: 0x180097148)
- InitializeSecurityDescriptor (Address: 0x180097090)
- RegCloseKey (Address: 0x1800970c0)
- RegCreateKeyExW (Address: 0x1800970f0)
- RegDeleteKeyExW (Address: 0x180097100)
- RegDeleteKeyValueW (Address: 0x1800970a8)
- RegDeleteKeyW (Address: 0x180097118)
- RegDeleteTreeW (Address: 0x1800970e0)
- RegDeleteValueW (Address: 0x1800970b8)
- RegEnumKeyExW (Address: 0x180097120)
- RegFlushKey (Address: 0x180097110)
- RegGetValueW (Address: 0x180097190)
- RegLoadAppKeyW (Address: 0x180097108)
- RegLoadKeyW (Address: 0x180097128)
- RegOpenKeyExW (Address: 0x1800970d0)
- RegOpenKeyW (Address: 0x1800970b0)
- RegQueryInfoKeyW (Address: 0x1800970d8)
- RegSaveKeyExW (Address: 0x1800970e8)
- RegSetKeySecurity (Address: 0x1800970a0)
- RegSetKeyValueW (Address: 0x1800970f8)
- RegSetValueExW (Address: 0x1800970c8)
- RegUnLoadKeyW (Address: 0x180097130)
- SetEntriesInAclW (Address: 0x180097088)
- SetSecurityDescriptorDacl (Address: 0x180097098)
- SetSecurityDescriptorOwner (Address: 0x180097138)
- TraceEvent (Address: 0x180097150)
bcrypt.dll
- BCryptCloseAlgorithmProvider (Address: 0x1800976b8)
- BCryptCreateHash (Address: 0x180097698)
- BCryptDestroyHash (Address: 0x1800976a8)
- BCryptFinishHash (Address: 0x180097690)
- BCryptGetProperty (Address: 0x180097688)
- BCryptHashData (Address: 0x1800976a0)
- BCryptOpenAlgorithmProvider (Address: 0x1800976b0)
CRYPT32.dll
- CertDuplicateCertificateContext (Address: 0x1800971b8)
- CertFreeCertificateContext (Address: 0x1800971a8)
- CertGetCertificateContextProperty (Address: 0x1800971c0)
- CertGetNameStringW (Address: 0x1800971b0)
KERNEL32.dll
- AcquireSRWLockExclusive (Address: 0x1800971f8)
- AcquireSRWLockShared (Address: 0x180097208)
- CloseHandle (Address: 0x180097218)
- CloseThreadpoolTimer (Address: 0x1800972a8)
- CreateActCtxW (Address: 0x180097498)
- CreateEventW (Address: 0x180097420)
- CreateFileMappingW (Address: 0x1800974c8)
- CreateFileW (Address: 0x180097318)
- CreateMutexExW (Address: 0x180097280)
- CreateMutexW (Address: 0x180097380)
- CreateSemaphoreExW (Address: 0x1800973a8)
- CreateSemaphoreW (Address: 0x180097488)
- CreateThreadpoolTimer (Address: 0x1800972b0)
- CreateWaitableTimerW (Address: 0x180097468)
- DebugBreak (Address: 0x180097328)
- DecodePointer (Address: 0x180097528)
- DelayLoadFailureHook (Address: 0x180097500)
- DeleteCriticalSection (Address: 0x180097350)
- DeleteFileW (Address: 0x180097368)
- DeviceIoControl (Address: 0x180097430)
- EncodePointer (Address: 0x180097520)
- EnterCriticalSection (Address: 0x1800973b0)
- ExpandEnvironmentStringsW (Address: 0x1800972c0)
- FileTimeToLocalFileTime (Address: 0x1800973f0)
- FileTimeToSystemTime (Address: 0x1800973e8)
- FindClose (Address: 0x180097378)
- FindFirstFileW (Address: 0x180097360)
- FindNextFileW (Address: 0x180097370)
- FormatMessageW (Address: 0x1800971e0)
- FreeEnvironmentStringsW (Address: 0x180097548)
- FreeLibrary (Address: 0x180097250)
- GetCommandLineW (Address: 0x1800973d8)
- GetCurrentDirectoryW (Address: 0x180097408)
- GetCurrentProcess (Address: 0x1800972e0)
- GetCurrentProcessId (Address: 0x1800972f8)
- GetCurrentThread (Address: 0x180097240)
- GetCurrentThreadId (Address: 0x1800971d8)
- GetDriveTypeW (Address: 0x180097410)
- GetEnvironmentStringsW (Address: 0x180097540)
- GetFileAttributesW (Address: 0x180097340)
- GetFileSize (Address: 0x1800974c0)
- GetFileTime (Address: 0x180097428)
- GetLastError (Address: 0x180097220)
- GetLogicalDriveStringsW (Address: 0x1800974b0)
- GetLongPathNameW (Address: 0x1800973f8)
- GetModuleFileNameA (Address: 0x1800973a0)
- GetModuleFileNameW (Address: 0x180097310)
- GetModuleHandleExA (Address: 0x180097320)
- GetModuleHandleExW (Address: 0x180097260)
- GetModuleHandleW (Address: 0x180097338)
- GetProcAddress (Address: 0x180097258)
- GetProcessHeap (Address: 0x1800971f0)
- GetStringTypeW (Address: 0x180097518)
- GetSystemDirectoryW (Address: 0x180097458)
- GetSystemFirmwareTable (Address: 0x180097490)
- GetSystemInfo (Address: 0x180097418)
- GetSystemPowerStatus (Address: 0x180097298)
- GetSystemTimeAsFileTime (Address: 0x180097300)
- GetSystemWindowsDirectoryW (Address: 0x180097348)
- GetTempFileNameW (Address: 0x180097398)
- GetTempPathW (Address: 0x180097390)
- GetTickCount (Address: 0x180097230)
- GetVolumeInformationByHandleW (Address: 0x180097438)
- HeapAlloc (Address: 0x1800971e8)
- HeapFree (Address: 0x1800971d0)
- HeapReAlloc (Address: 0x180097440)
- InitializeCriticalSectionEx (Address: 0x180097358)
- InitOnceExecuteOnce (Address: 0x180097550)
- IsDebuggerPresent (Address: 0x180097278)
- K32EnumProcesses (Address: 0x1800974e0)
- LeaveCriticalSection (Address: 0x1800973c0)
- LoadLibraryExA (Address: 0x1800974f8)
- LoadLibraryExW (Address: 0x180097330)
- LoadLibraryW (Address: 0x180097270)
- LocalAlloc (Address: 0x180097400)
- LocaleNameToLCID (Address: 0x180097450)
- LocalFree (Address: 0x1800972c8)
- MapViewOfFile (Address: 0x1800974d0)
- MoveFileExW (Address: 0x1800973e0)
- MultiByteToWideChar (Address: 0x180097510)
- OpenProcess (Address: 0x1800974e8)
- OpenSemaphoreW (Address: 0x180097288)
- OpenWaitableTimerW (Address: 0x180097478)
- OutputDebugStringA (Address: 0x180097308)
- OutputDebugStringW (Address: 0x180097558)
- QueryActCtxW (Address: 0x1800974a0)
- QueryDosDeviceW (Address: 0x1800974b8)
- QueryFullProcessImageNameW (Address: 0x1800974f0)
- QueryPerformanceCounter (Address: 0x1800972f0)
- QueryThreadCycleTime (Address: 0x180097238)
- RaiseException (Address: 0x180097448)
- ReleaseActCtx (Address: 0x1800974a8)
- ReleaseMutex (Address: 0x180097388)
- ReleaseSemaphore (Address: 0x1800973b8)
- ReleaseSRWLockExclusive (Address: 0x180097200)
- ReleaseSRWLockShared (Address: 0x180097210)
- SetEvent (Address: 0x180097480)
- SetLastError (Address: 0x180097228)
- SetThreadpoolTimer (Address: 0x1800973c8)
- SetUnhandledExceptionFilter (Address: 0x1800972d8)
- SetWaitableTimer (Address: 0x180097460)
- Sleep (Address: 0x180097248)
- SleepConditionVariableSRW (Address: 0x180097538)
- TerminateProcess (Address: 0x1800972e8)
- UnhandledExceptionFilter (Address: 0x1800972d0)
- UnmapViewOfFile (Address: 0x1800974d8)
- VerifyVersionInfoW (Address: 0x180097268)
- WaitForMultipleObjects (Address: 0x180097470)
- WaitForSingleObject (Address: 0x180097290)
- WaitForSingleObjectEx (Address: 0x1800973d0)
- WaitForThreadpoolTimerCallbacks (Address: 0x1800972a0)
- WakeAllConditionVariable (Address: 0x180097530)
- WideCharToMultiByte (Address: 0x180097508)
- WriteFile (Address: 0x1800972b8)
msi.dll
- (Address: 0x1800976c8)
- (Address: 0x1800976d0)
- (Address: 0x1800976d8)
- (Address: 0x1800976e0)
- (Address: 0x1800976e8)
- (Address: 0x1800976f0)
- (Address: 0x1800976f8)
- (Address: 0x180097700)
- (Address: 0x180097708)
- (Address: 0x180097710)
- (Address: 0x180097718)
- (Address: 0x180097720)
msvcrt.dll
- ___lc_codepage_func (Address: 0x1800978a0)
- ___lc_collate_cp_func (Address: 0x1800978c8)
- ___lc_handle_func (Address: 0x180097898)
- ___mb_cur_max_func (Address: 0x180097890)
- __C_specific_handler (Address: 0x180097960)
- __crtCompareStringW (Address: 0x180097930)
- __crtLCMapStringW (Address: 0x180097928)
- __CxxFrameHandler3 (Address: 0x180097a50)
- __dllonexit (Address: 0x180097940)
- __mb_cur_max (Address: 0x1800977e0)
- __pctype_func (Address: 0x1800978b0)
- __uncaught_exception (Address: 0x1800978c0)
- _amsg_exit (Address: 0x180097980)
- _CxxThrowException (Address: 0x1800979a0)
- _errno (Address: 0x180097a00)
- _fseeki64 (Address: 0x1800977c8)
- _initterm (Address: 0x180097968)
- _ismbblead (Address: 0x1800978a8)
- _lock (Address: 0x180097950)
- _mktime64 (Address: 0x180097810)
- _onexit (Address: 0x180097910)
- _purecall (Address: 0x180097a38)
- _set_errno (Address: 0x1800979f0)
- _unlock (Address: 0x180097948)
- _vscwprintf (Address: 0x1800977e8)
- _vsnprintf (Address: 0x1800979c0)
- _vsnprintf_s (Address: 0x180097a18)
- _vsnwprintf (Address: 0x180097a48)
- _vsnwprintf_s (Address: 0x1800977d0)
- _wcsdup (Address: 0x1800979d8)
- _wcsicmp (Address: 0x1800979b8)
- _wcslwr (Address: 0x180097840)
- _wcsnicmp (Address: 0x1800979d0)
- _wctime64 (Address: 0x180097818)
- _wfsopen (Address: 0x1800978e0)
- _wsetlocale (Address: 0x180097920)
- _wsplitpath_s (Address: 0x180097758)
- _wtoi (Address: 0x1800977f0)
- _wtoi64 (Address: 0x180097778)
- _XcptFilter (Address: 0x180097988)
- ??0bad_cast@@QEAA@AEBV0@@Z (Address: 0x1800977b0)
- ??0bad_cast@@QEAA@PEBD@Z (Address: 0x180097798)
- ??0exception@@QEAA@AEBQEBD@Z (Address: 0x1800979b0)
- ??0exception@@QEAA@AEBQEBDH@Z (Address: 0x1800979a8)
- ??0exception@@QEAA@AEBV0@@Z (Address: 0x180097a20)
- ??0exception@@QEAA@XZ (Address: 0x180097a28)
- ??1bad_cast@@UEAA@XZ (Address: 0x180097938)
- ??1exception@@UEAA@XZ (Address: 0x180097a30)
- ??1type_info@@UEAA@XZ (Address: 0x180097908)
- ?terminate@@YAXXZ (Address: 0x180097958)
- ?what@exception@@UEBAPEBDXZ (Address: 0x1800979e0)
- abort (Address: 0x1800978f0)
- calloc (Address: 0x1800978b8)
- fclose (Address: 0x180097878)
- fflush (Address: 0x1800977a8)
- fgetc (Address: 0x180097730)
- fgetpos (Address: 0x1800977d8)
- fgetwc (Address: 0x180097750)
- fputwc (Address: 0x180097760)
- free (Address: 0x180097978)
- fseek (Address: 0x1800978d8)
- fsetpos (Address: 0x1800977c0)
- fwrite (Address: 0x180097870)
- isdigit (Address: 0x180097880)
- iswalpha (Address: 0x1800978e8)
- iswcntrl (Address: 0x1800977f8)
- iswspace (Address: 0x180097800)
- malloc (Address: 0x180097970)
- memcmp (Address: 0x1800978d0)
- memcpy (Address: 0x180097998)
- memcpy_s (Address: 0x180097a40)
- memmove (Address: 0x180097990)
- memmove_s (Address: 0x180097820)
- memset (Address: 0x180097918)
- realloc (Address: 0x180097790)
- setlocale (Address: 0x180097888)
- setvbuf (Address: 0x1800977b8)
- sprintf_s (Address: 0x180097a10)
- strchr (Address: 0x1800979e8)
- strcmp (Address: 0x180097900)
- strcpy_s (Address: 0x180097868)
- strncmp (Address: 0x180097828)
- strncpy_s (Address: 0x180097a08)
- strnlen (Address: 0x180097770)
- strtol (Address: 0x1800979f8)
- tolower (Address: 0x180097808)
- toupper (Address: 0x180097830)
- towlower (Address: 0x180097780)
- ungetc (Address: 0x180097768)
- ungetwc (Address: 0x1800977a0)
- wcscat_s (Address: 0x180097848)
- wcschr (Address: 0x180097860)
- wcscmp (Address: 0x180097740)
- wcscpy_s (Address: 0x180097850)
- wcsncmp (Address: 0x180097838)
- wcsrchr (Address: 0x180097858)
- wcsspn (Address: 0x1800978f8)
- wcsstr (Address: 0x1800979c8)
- wcstok_s (Address: 0x180097738)
- wcstombs (Address: 0x180097788)
- wcstoul (Address: 0x180097748)
ntdll.dll
- EtwEventRegister (Address: 0x180097b58)
- EtwEventUnregister (Address: 0x180097b68)
- EtwEventWrite (Address: 0x180097b60)
- EtwEventWriteNoRegistration (Address: 0x180097c70)
- EtwTraceMessage (Address: 0x180097a70)
- LdrResSearchResource (Address: 0x180097ae8)
- NtLoadKeyEx (Address: 0x180097a90)
- NtQueryKey (Address: 0x180097ab0)
- NtQueryLicenseValue (Address: 0x180097a78)
- RtlAdjustPrivilege (Address: 0x180097ad0)
- RtlAllocateAndInitializeSid (Address: 0x180097ac0)
- RtlAllocateHeap (Address: 0x180097c58)
- RtlAnsiStringToUnicodeString (Address: 0x180097b40)
- RtlAppendUnicodeStringToString (Address: 0x180097bb0)
- RtlAppendUnicodeToString (Address: 0x180097ba8)
- RtlCaptureContext (Address: 0x180097c78)
- RtlCompareMemory (Address: 0x180097c20)
- RtlComputeCrc32 (Address: 0x180097c18)
- RtlCopyUnicodeString (Address: 0x180097c50)
- RtlDeleteCriticalSection (Address: 0x180097c60)
- RtlDosPathNameToNtPathName_U_WithStatus (Address: 0x180097be8)
- RtlDosPathNameToRelativeNtPathName_U (Address: 0x180097a98)
- RtlEnterCriticalSection (Address: 0x180097c30)
- RtlEqualString (Address: 0x180097c40)
- RtlFormatCurrentUserKeyPath (Address: 0x180097ba0)
- RtlFreeHeap (Address: 0x180097c00)
- RtlFreeSid (Address: 0x180097ab8)
- RtlFreeUnicodeString (Address: 0x180097bd0)
- RtlGetNativeSystemInformation (Address: 0x180097b10)
- RtlGetVersion (Address: 0x180097a80)
- RtlImageDirectoryEntryToData (Address: 0x180097ad8)
- RtlInitAnsiString (Address: 0x180097c28)
- RtlInitializeCriticalSection (Address: 0x180097c08)
- RtlInitString (Address: 0x180097b50)
- RtlInitUnicodeString (Address: 0x180097be0)
- RtlInitUnicodeStringEx (Address: 0x180097bc0)
- RtlLeaveCriticalSection (Address: 0x180097bf8)
- RtlLookupFunctionEntry (Address: 0x180097c88)
- RtlMultiByteToUnicodeN (Address: 0x180097c10)
- RtlNtPathNameToDosPathName (Address: 0x180097b18)
- RtlNtStatusToDosError (Address: 0x180097ac8)
- RtlpEnsureBufferSize (Address: 0x180097b20)
- RtlRandomEx (Address: 0x180097aa8)
- RtlReAllocateHeap (Address: 0x180097c38)
- RtlReleaseRelativeName (Address: 0x180097a88)
- RtlRunOnceExecuteOnce (Address: 0x180097c48)
- RtlSecondsSince1970ToTime (Address: 0x180097b70)
- RtlStringFromGUID (Address: 0x180097aa0)
- RtlTimeToTimeFields (Address: 0x180097af0)
- RtlUpcaseUnicodeChar (Address: 0x180097b30)
- RtlUpcaseUnicodeString (Address: 0x180097b38)
- RtlVerifyVersionInfo (Address: 0x180097ae0)
- RtlVirtualUnwind (Address: 0x180097c80)
- RtlxAnsiStringToUnicodeSize (Address: 0x180097b48)
- VerSetConditionMask (Address: 0x180097a68)
- WinSqmIsOptedInEx (Address: 0x180097c68)
- ZwClose (Address: 0x180097bf0)
- ZwCreateFile (Address: 0x180097b98)
- ZwCreateSection (Address: 0x180097b88)
- ZwEnumerateKey (Address: 0x180097a60)
- ZwMapViewOfSection (Address: 0x180097af8)
- ZwOpenFile (Address: 0x180097bd8)
- ZwOpenKey (Address: 0x180097bc8)
- ZwQueryDirectoryFile (Address: 0x180097b28)
- ZwQueryInformationFile (Address: 0x180097b90)
- ZwQueryInformationProcess (Address: 0x180097b80)
- ZwQuerySystemInformation (Address: 0x180097b08)
- ZwQueryValueKey (Address: 0x180097bb8)
- ZwSetInformationProcess (Address: 0x180097b78)
- ZwUnmapViewOfSection (Address: 0x180097b00)
ole32.dll
- CoCreateInstance (Address: 0x180097cb0)
- CoInitializeEx (Address: 0x180097c98)
- CoTaskMemFree (Address: 0x180097ca8)
- CoUninitialize (Address: 0x180097cb8)
- PropVariantClear (Address: 0x180097ca0)
OLEAUT32.dll
- SysAllocString (Address: 0x180097588)
- SysFreeString (Address: 0x180097580)
- SysStringLen (Address: 0x180097590)
- VariantChangeType (Address: 0x180097578)
- VariantClear (Address: 0x180097568)
- VariantCopy (Address: 0x180097570)
- VariantInit (Address: 0x180097598)
RPCRT4.dll
- UuidCreate (Address: 0x1800975a8)
SHELL32.dll
- CommandLineToArgvW (Address: 0x1800975c0)
- SHCreateItemFromIDList (Address: 0x1800975d8)
- SHCreateItemFromParsingName (Address: 0x1800975b8)
- SHGetFolderPathW (Address: 0x1800975d0)
- SHGetKnownFolderPath (Address: 0x1800975c8)
SHLWAPI.dll
- (Address: 0x180097608)
- PathCommonPrefixW (Address: 0x180097618)
- PathFileExistsW (Address: 0x1800975e8)
- PathFindFileNameW (Address: 0x180097610)
- PathIsNetworkPathW (Address: 0x1800975f0)
- PathUnExpandEnvStringsW (Address: 0x180097600)
- SHCreateStreamOnFileEx (Address: 0x1800975f8)
WINTRUST.dll
- CryptCATAdminAcquireContext (Address: 0x180097668)
- CryptCATAdminCalcHashFromFileHandle (Address: 0x180097638)
- CryptCATAdminEnumCatalogFromHash (Address: 0x180097660)
- CryptCATAdminReleaseCatalogContext (Address: 0x180097628)
- CryptCATAdminReleaseContext (Address: 0x180097650)
- CryptCATCatalogInfoFromContext (Address: 0x180097630)
- WinVerifyTrust (Address: 0x180097658)
- WTHelperGetProvSignerFromChain (Address: 0x180097640)
- WTHelperProvDataFromStateData (Address: 0x180097648)
XmlLite.dll
- CreateXmlReader (Address: 0x180097678)