aeinv.dll

Description: Application Inventory Component

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19645.1121

Architecture: 64-bit

Operating System: Windows NT

SHA256: 94fd850abe38ebf17c996f9fa17ca750

File Size: 901.4 KB

Uploaded At: Dec. 1, 2025, 7:46 a.m.

Views: 8

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • CreateAppxPackageInventory (Ordinal: 1, Address: 0x56b40)
  • CreateAppxPackageInventoryExtracted (Ordinal: 2, Address: 0x56e90)
  • CreateSoftwareInventory (Ordinal: 3, Address: 0x572d0)
  • GetAppInfo (Ordinal: 4, Address: 0xc1d0)
  • GetAppInventory (Ordinal: 5, Address: 0x58500)
  • GetCachedAppInventory (Ordinal: 6, Address: 0xcfb0)
  • GetDetailedAppInventory (Ordinal: 7, Address: 0x5a890)
  • GetDetailedAppInventoryFile (Ordinal: 8, Address: 0x5c070)
  • UpdateSoftwareInventoryW (Ordinal: 9, Address: 0x5ccc0)

Imported DLLs & Functions

ADVAPI32.dll
  • ConvertSidToStringSidW (Address: 0x180097140)
  • CryptAcquireContextW (Address: 0x180097158)
  • CryptCreateHash (Address: 0x180097160)
  • CryptDestroyHash (Address: 0x180097178)
  • CryptGetHashParam (Address: 0x180097170)
  • CryptHashData (Address: 0x180097168)
  • CryptReleaseContext (Address: 0x180097180)
  • EventRegister (Address: 0x180097198)
  • EventUnregister (Address: 0x180097080)
  • EventWriteTransfer (Address: 0x180097188)
  • GetTokenInformation (Address: 0x180097148)
  • InitializeSecurityDescriptor (Address: 0x180097090)
  • RegCloseKey (Address: 0x1800970c0)
  • RegCreateKeyExW (Address: 0x1800970f0)
  • RegDeleteKeyExW (Address: 0x180097100)
  • RegDeleteKeyValueW (Address: 0x1800970a8)
  • RegDeleteKeyW (Address: 0x180097118)
  • RegDeleteTreeW (Address: 0x1800970e0)
  • RegDeleteValueW (Address: 0x1800970b8)
  • RegEnumKeyExW (Address: 0x180097120)
  • RegFlushKey (Address: 0x180097110)
  • RegGetValueW (Address: 0x180097190)
  • RegLoadAppKeyW (Address: 0x180097108)
  • RegLoadKeyW (Address: 0x180097128)
  • RegOpenKeyExW (Address: 0x1800970d0)
  • RegOpenKeyW (Address: 0x1800970b0)
  • RegQueryInfoKeyW (Address: 0x1800970d8)
  • RegSaveKeyExW (Address: 0x1800970e8)
  • RegSetKeySecurity (Address: 0x1800970a0)
  • RegSetKeyValueW (Address: 0x1800970f8)
  • RegSetValueExW (Address: 0x1800970c8)
  • RegUnLoadKeyW (Address: 0x180097130)
  • SetEntriesInAclW (Address: 0x180097088)
  • SetSecurityDescriptorDacl (Address: 0x180097098)
  • SetSecurityDescriptorOwner (Address: 0x180097138)
  • TraceEvent (Address: 0x180097150)
bcrypt.dll
  • BCryptCloseAlgorithmProvider (Address: 0x1800976b8)
  • BCryptCreateHash (Address: 0x180097698)
  • BCryptDestroyHash (Address: 0x1800976a8)
  • BCryptFinishHash (Address: 0x180097690)
  • BCryptGetProperty (Address: 0x180097688)
  • BCryptHashData (Address: 0x1800976a0)
  • BCryptOpenAlgorithmProvider (Address: 0x1800976b0)
CRYPT32.dll
  • CertDuplicateCertificateContext (Address: 0x1800971b8)
  • CertFreeCertificateContext (Address: 0x1800971a8)
  • CertGetCertificateContextProperty (Address: 0x1800971c0)
  • CertGetNameStringW (Address: 0x1800971b0)
KERNEL32.dll
  • AcquireSRWLockExclusive (Address: 0x1800971f8)
  • AcquireSRWLockShared (Address: 0x180097208)
  • CloseHandle (Address: 0x180097218)
  • CloseThreadpoolTimer (Address: 0x1800972a8)
  • CreateActCtxW (Address: 0x180097498)
  • CreateEventW (Address: 0x180097420)
  • CreateFileMappingW (Address: 0x1800974c8)
  • CreateFileW (Address: 0x180097318)
  • CreateMutexExW (Address: 0x180097280)
  • CreateMutexW (Address: 0x180097380)
  • CreateSemaphoreExW (Address: 0x1800973a8)
  • CreateSemaphoreW (Address: 0x180097488)
  • CreateThreadpoolTimer (Address: 0x1800972b0)
  • CreateWaitableTimerW (Address: 0x180097468)
  • DebugBreak (Address: 0x180097328)
  • DecodePointer (Address: 0x180097528)
  • DelayLoadFailureHook (Address: 0x180097500)
  • DeleteCriticalSection (Address: 0x180097350)
  • DeleteFileW (Address: 0x180097368)
  • DeviceIoControl (Address: 0x180097430)
  • EncodePointer (Address: 0x180097520)
  • EnterCriticalSection (Address: 0x1800973b0)
  • ExpandEnvironmentStringsW (Address: 0x1800972c0)
  • FileTimeToLocalFileTime (Address: 0x1800973f0)
  • FileTimeToSystemTime (Address: 0x1800973e8)
  • FindClose (Address: 0x180097378)
  • FindFirstFileW (Address: 0x180097360)
  • FindNextFileW (Address: 0x180097370)
  • FormatMessageW (Address: 0x1800971e0)
  • FreeEnvironmentStringsW (Address: 0x180097548)
  • FreeLibrary (Address: 0x180097250)
  • GetCommandLineW (Address: 0x1800973d8)
  • GetCurrentDirectoryW (Address: 0x180097408)
  • GetCurrentProcess (Address: 0x1800972e0)
  • GetCurrentProcessId (Address: 0x1800972f8)
  • GetCurrentThread (Address: 0x180097240)
  • GetCurrentThreadId (Address: 0x1800971d8)
  • GetDriveTypeW (Address: 0x180097410)
  • GetEnvironmentStringsW (Address: 0x180097540)
  • GetFileAttributesW (Address: 0x180097340)
  • GetFileSize (Address: 0x1800974c0)
  • GetFileTime (Address: 0x180097428)
  • GetLastError (Address: 0x180097220)
  • GetLogicalDriveStringsW (Address: 0x1800974b0)
  • GetLongPathNameW (Address: 0x1800973f8)
  • GetModuleFileNameA (Address: 0x1800973a0)
  • GetModuleFileNameW (Address: 0x180097310)
  • GetModuleHandleExA (Address: 0x180097320)
  • GetModuleHandleExW (Address: 0x180097260)
  • GetModuleHandleW (Address: 0x180097338)
  • GetProcAddress (Address: 0x180097258)
  • GetProcessHeap (Address: 0x1800971f0)
  • GetStringTypeW (Address: 0x180097518)
  • GetSystemDirectoryW (Address: 0x180097458)
  • GetSystemFirmwareTable (Address: 0x180097490)
  • GetSystemInfo (Address: 0x180097418)
  • GetSystemPowerStatus (Address: 0x180097298)
  • GetSystemTimeAsFileTime (Address: 0x180097300)
  • GetSystemWindowsDirectoryW (Address: 0x180097348)
  • GetTempFileNameW (Address: 0x180097398)
  • GetTempPathW (Address: 0x180097390)
  • GetTickCount (Address: 0x180097230)
  • GetVolumeInformationByHandleW (Address: 0x180097438)
  • HeapAlloc (Address: 0x1800971e8)
  • HeapFree (Address: 0x1800971d0)
  • HeapReAlloc (Address: 0x180097440)
  • InitializeCriticalSectionEx (Address: 0x180097358)
  • InitOnceExecuteOnce (Address: 0x180097550)
  • IsDebuggerPresent (Address: 0x180097278)
  • K32EnumProcesses (Address: 0x1800974e0)
  • LeaveCriticalSection (Address: 0x1800973c0)
  • LoadLibraryExA (Address: 0x1800974f8)
  • LoadLibraryExW (Address: 0x180097330)
  • LoadLibraryW (Address: 0x180097270)
  • LocalAlloc (Address: 0x180097400)
  • LocaleNameToLCID (Address: 0x180097450)
  • LocalFree (Address: 0x1800972c8)
  • MapViewOfFile (Address: 0x1800974d0)
  • MoveFileExW (Address: 0x1800973e0)
  • MultiByteToWideChar (Address: 0x180097510)
  • OpenProcess (Address: 0x1800974e8)
  • OpenSemaphoreW (Address: 0x180097288)
  • OpenWaitableTimerW (Address: 0x180097478)
  • OutputDebugStringA (Address: 0x180097308)
  • OutputDebugStringW (Address: 0x180097558)
  • QueryActCtxW (Address: 0x1800974a0)
  • QueryDosDeviceW (Address: 0x1800974b8)
  • QueryFullProcessImageNameW (Address: 0x1800974f0)
  • QueryPerformanceCounter (Address: 0x1800972f0)
  • QueryThreadCycleTime (Address: 0x180097238)
  • RaiseException (Address: 0x180097448)
  • ReleaseActCtx (Address: 0x1800974a8)
  • ReleaseMutex (Address: 0x180097388)
  • ReleaseSemaphore (Address: 0x1800973b8)
  • ReleaseSRWLockExclusive (Address: 0x180097200)
  • ReleaseSRWLockShared (Address: 0x180097210)
  • SetEvent (Address: 0x180097480)
  • SetLastError (Address: 0x180097228)
  • SetThreadpoolTimer (Address: 0x1800973c8)
  • SetUnhandledExceptionFilter (Address: 0x1800972d8)
  • SetWaitableTimer (Address: 0x180097460)
  • Sleep (Address: 0x180097248)
  • SleepConditionVariableSRW (Address: 0x180097538)
  • TerminateProcess (Address: 0x1800972e8)
  • UnhandledExceptionFilter (Address: 0x1800972d0)
  • UnmapViewOfFile (Address: 0x1800974d8)
  • VerifyVersionInfoW (Address: 0x180097268)
  • WaitForMultipleObjects (Address: 0x180097470)
  • WaitForSingleObject (Address: 0x180097290)
  • WaitForSingleObjectEx (Address: 0x1800973d0)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1800972a0)
  • WakeAllConditionVariable (Address: 0x180097530)
  • WideCharToMultiByte (Address: 0x180097508)
  • WriteFile (Address: 0x1800972b8)
msi.dll
  • (Address: 0x1800976c8)
  • (Address: 0x1800976d0)
  • (Address: 0x1800976d8)
  • (Address: 0x1800976e0)
  • (Address: 0x1800976e8)
  • (Address: 0x1800976f0)
  • (Address: 0x1800976f8)
  • (Address: 0x180097700)
  • (Address: 0x180097708)
  • (Address: 0x180097710)
  • (Address: 0x180097718)
  • (Address: 0x180097720)
msvcrt.dll
  • ___lc_codepage_func (Address: 0x1800978a0)
  • ___lc_collate_cp_func (Address: 0x1800978c8)
  • ___lc_handle_func (Address: 0x180097898)
  • ___mb_cur_max_func (Address: 0x180097890)
  • __C_specific_handler (Address: 0x180097960)
  • __crtCompareStringW (Address: 0x180097930)
  • __crtLCMapStringW (Address: 0x180097928)
  • __CxxFrameHandler3 (Address: 0x180097a50)
  • __dllonexit (Address: 0x180097940)
  • __mb_cur_max (Address: 0x1800977e0)
  • __pctype_func (Address: 0x1800978b0)
  • __uncaught_exception (Address: 0x1800978c0)
  • _amsg_exit (Address: 0x180097980)
  • _CxxThrowException (Address: 0x1800979a0)
  • _errno (Address: 0x180097a00)
  • _fseeki64 (Address: 0x1800977c8)
  • _initterm (Address: 0x180097968)
  • _ismbblead (Address: 0x1800978a8)
  • _lock (Address: 0x180097950)
  • _mktime64 (Address: 0x180097810)
  • _onexit (Address: 0x180097910)
  • _purecall (Address: 0x180097a38)
  • _set_errno (Address: 0x1800979f0)
  • _unlock (Address: 0x180097948)
  • _vscwprintf (Address: 0x1800977e8)
  • _vsnprintf (Address: 0x1800979c0)
  • _vsnprintf_s (Address: 0x180097a18)
  • _vsnwprintf (Address: 0x180097a48)
  • _vsnwprintf_s (Address: 0x1800977d0)
  • _wcsdup (Address: 0x1800979d8)
  • _wcsicmp (Address: 0x1800979b8)
  • _wcslwr (Address: 0x180097840)
  • _wcsnicmp (Address: 0x1800979d0)
  • _wctime64 (Address: 0x180097818)
  • _wfsopen (Address: 0x1800978e0)
  • _wsetlocale (Address: 0x180097920)
  • _wsplitpath_s (Address: 0x180097758)
  • _wtoi (Address: 0x1800977f0)
  • _wtoi64 (Address: 0x180097778)
  • _XcptFilter (Address: 0x180097988)
  • ??0bad_cast@@QEAA@AEBV0@@Z (Address: 0x1800977b0)
  • ??0bad_cast@@QEAA@PEBD@Z (Address: 0x180097798)
  • ??0exception@@QEAA@AEBQEBD@Z (Address: 0x1800979b0)
  • ??0exception@@QEAA@AEBQEBDH@Z (Address: 0x1800979a8)
  • ??0exception@@QEAA@AEBV0@@Z (Address: 0x180097a20)
  • ??0exception@@QEAA@XZ (Address: 0x180097a28)
  • ??1bad_cast@@UEAA@XZ (Address: 0x180097938)
  • ??1exception@@UEAA@XZ (Address: 0x180097a30)
  • ??1type_info@@UEAA@XZ (Address: 0x180097908)
  • ?terminate@@YAXXZ (Address: 0x180097958)
  • ?what@exception@@UEBAPEBDXZ (Address: 0x1800979e0)
  • abort (Address: 0x1800978f0)
  • calloc (Address: 0x1800978b8)
  • fclose (Address: 0x180097878)
  • fflush (Address: 0x1800977a8)
  • fgetc (Address: 0x180097730)
  • fgetpos (Address: 0x1800977d8)
  • fgetwc (Address: 0x180097750)
  • fputwc (Address: 0x180097760)
  • free (Address: 0x180097978)
  • fseek (Address: 0x1800978d8)
  • fsetpos (Address: 0x1800977c0)
  • fwrite (Address: 0x180097870)
  • isdigit (Address: 0x180097880)
  • iswalpha (Address: 0x1800978e8)
  • iswcntrl (Address: 0x1800977f8)
  • iswspace (Address: 0x180097800)
  • malloc (Address: 0x180097970)
  • memcmp (Address: 0x1800978d0)
  • memcpy (Address: 0x180097998)
  • memcpy_s (Address: 0x180097a40)
  • memmove (Address: 0x180097990)
  • memmove_s (Address: 0x180097820)
  • memset (Address: 0x180097918)
  • realloc (Address: 0x180097790)
  • setlocale (Address: 0x180097888)
  • setvbuf (Address: 0x1800977b8)
  • sprintf_s (Address: 0x180097a10)
  • strchr (Address: 0x1800979e8)
  • strcmp (Address: 0x180097900)
  • strcpy_s (Address: 0x180097868)
  • strncmp (Address: 0x180097828)
  • strncpy_s (Address: 0x180097a08)
  • strnlen (Address: 0x180097770)
  • strtol (Address: 0x1800979f8)
  • tolower (Address: 0x180097808)
  • toupper (Address: 0x180097830)
  • towlower (Address: 0x180097780)
  • ungetc (Address: 0x180097768)
  • ungetwc (Address: 0x1800977a0)
  • wcscat_s (Address: 0x180097848)
  • wcschr (Address: 0x180097860)
  • wcscmp (Address: 0x180097740)
  • wcscpy_s (Address: 0x180097850)
  • wcsncmp (Address: 0x180097838)
  • wcsrchr (Address: 0x180097858)
  • wcsspn (Address: 0x1800978f8)
  • wcsstr (Address: 0x1800979c8)
  • wcstok_s (Address: 0x180097738)
  • wcstombs (Address: 0x180097788)
  • wcstoul (Address: 0x180097748)
ntdll.dll
  • EtwEventRegister (Address: 0x180097b58)
  • EtwEventUnregister (Address: 0x180097b68)
  • EtwEventWrite (Address: 0x180097b60)
  • EtwEventWriteNoRegistration (Address: 0x180097c70)
  • EtwTraceMessage (Address: 0x180097a70)
  • LdrResSearchResource (Address: 0x180097ae8)
  • NtLoadKeyEx (Address: 0x180097a90)
  • NtQueryKey (Address: 0x180097ab0)
  • NtQueryLicenseValue (Address: 0x180097a78)
  • RtlAdjustPrivilege (Address: 0x180097ad0)
  • RtlAllocateAndInitializeSid (Address: 0x180097ac0)
  • RtlAllocateHeap (Address: 0x180097c58)
  • RtlAnsiStringToUnicodeString (Address: 0x180097b40)
  • RtlAppendUnicodeStringToString (Address: 0x180097bb0)
  • RtlAppendUnicodeToString (Address: 0x180097ba8)
  • RtlCaptureContext (Address: 0x180097c78)
  • RtlCompareMemory (Address: 0x180097c20)
  • RtlComputeCrc32 (Address: 0x180097c18)
  • RtlCopyUnicodeString (Address: 0x180097c50)
  • RtlDeleteCriticalSection (Address: 0x180097c60)
  • RtlDosPathNameToNtPathName_U_WithStatus (Address: 0x180097be8)
  • RtlDosPathNameToRelativeNtPathName_U (Address: 0x180097a98)
  • RtlEnterCriticalSection (Address: 0x180097c30)
  • RtlEqualString (Address: 0x180097c40)
  • RtlFormatCurrentUserKeyPath (Address: 0x180097ba0)
  • RtlFreeHeap (Address: 0x180097c00)
  • RtlFreeSid (Address: 0x180097ab8)
  • RtlFreeUnicodeString (Address: 0x180097bd0)
  • RtlGetNativeSystemInformation (Address: 0x180097b10)
  • RtlGetVersion (Address: 0x180097a80)
  • RtlImageDirectoryEntryToData (Address: 0x180097ad8)
  • RtlInitAnsiString (Address: 0x180097c28)
  • RtlInitializeCriticalSection (Address: 0x180097c08)
  • RtlInitString (Address: 0x180097b50)
  • RtlInitUnicodeString (Address: 0x180097be0)
  • RtlInitUnicodeStringEx (Address: 0x180097bc0)
  • RtlLeaveCriticalSection (Address: 0x180097bf8)
  • RtlLookupFunctionEntry (Address: 0x180097c88)
  • RtlMultiByteToUnicodeN (Address: 0x180097c10)
  • RtlNtPathNameToDosPathName (Address: 0x180097b18)
  • RtlNtStatusToDosError (Address: 0x180097ac8)
  • RtlpEnsureBufferSize (Address: 0x180097b20)
  • RtlRandomEx (Address: 0x180097aa8)
  • RtlReAllocateHeap (Address: 0x180097c38)
  • RtlReleaseRelativeName (Address: 0x180097a88)
  • RtlRunOnceExecuteOnce (Address: 0x180097c48)
  • RtlSecondsSince1970ToTime (Address: 0x180097b70)
  • RtlStringFromGUID (Address: 0x180097aa0)
  • RtlTimeToTimeFields (Address: 0x180097af0)
  • RtlUpcaseUnicodeChar (Address: 0x180097b30)
  • RtlUpcaseUnicodeString (Address: 0x180097b38)
  • RtlVerifyVersionInfo (Address: 0x180097ae0)
  • RtlVirtualUnwind (Address: 0x180097c80)
  • RtlxAnsiStringToUnicodeSize (Address: 0x180097b48)
  • VerSetConditionMask (Address: 0x180097a68)
  • WinSqmIsOptedInEx (Address: 0x180097c68)
  • ZwClose (Address: 0x180097bf0)
  • ZwCreateFile (Address: 0x180097b98)
  • ZwCreateSection (Address: 0x180097b88)
  • ZwEnumerateKey (Address: 0x180097a60)
  • ZwMapViewOfSection (Address: 0x180097af8)
  • ZwOpenFile (Address: 0x180097bd8)
  • ZwOpenKey (Address: 0x180097bc8)
  • ZwQueryDirectoryFile (Address: 0x180097b28)
  • ZwQueryInformationFile (Address: 0x180097b90)
  • ZwQueryInformationProcess (Address: 0x180097b80)
  • ZwQuerySystemInformation (Address: 0x180097b08)
  • ZwQueryValueKey (Address: 0x180097bb8)
  • ZwSetInformationProcess (Address: 0x180097b78)
  • ZwUnmapViewOfSection (Address: 0x180097b00)
ole32.dll
  • CoCreateInstance (Address: 0x180097cb0)
  • CoInitializeEx (Address: 0x180097c98)
  • CoTaskMemFree (Address: 0x180097ca8)
  • CoUninitialize (Address: 0x180097cb8)
  • PropVariantClear (Address: 0x180097ca0)
OLEAUT32.dll
  • SysAllocString (Address: 0x180097588)
  • SysFreeString (Address: 0x180097580)
  • SysStringLen (Address: 0x180097590)
  • VariantChangeType (Address: 0x180097578)
  • VariantClear (Address: 0x180097568)
  • VariantCopy (Address: 0x180097570)
  • VariantInit (Address: 0x180097598)
RPCRT4.dll
  • UuidCreate (Address: 0x1800975a8)
SHELL32.dll
  • CommandLineToArgvW (Address: 0x1800975c0)
  • SHCreateItemFromIDList (Address: 0x1800975d8)
  • SHCreateItemFromParsingName (Address: 0x1800975b8)
  • SHGetFolderPathW (Address: 0x1800975d0)
  • SHGetKnownFolderPath (Address: 0x1800975c8)
SHLWAPI.dll
  • (Address: 0x180097608)
  • PathCommonPrefixW (Address: 0x180097618)
  • PathFileExistsW (Address: 0x1800975e8)
  • PathFindFileNameW (Address: 0x180097610)
  • PathIsNetworkPathW (Address: 0x1800975f0)
  • PathUnExpandEnvStringsW (Address: 0x180097600)
  • SHCreateStreamOnFileEx (Address: 0x1800975f8)
WINTRUST.dll
  • CryptCATAdminAcquireContext (Address: 0x180097668)
  • CryptCATAdminCalcHashFromFileHandle (Address: 0x180097638)
  • CryptCATAdminEnumCatalogFromHash (Address: 0x180097660)
  • CryptCATAdminReleaseCatalogContext (Address: 0x180097628)
  • CryptCATAdminReleaseContext (Address: 0x180097650)
  • CryptCATCatalogInfoFromContext (Address: 0x180097630)
  • WinVerifyTrust (Address: 0x180097658)
  • WTHelperGetProvSignerFromChain (Address: 0x180097640)
  • WTHelperProvDataFromStateData (Address: 0x180097648)
XmlLite.dll
  • CreateXmlReader (Address: 0x180097678)