aeinv.dll
v10.0.19645.1121
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 9
CreateAppxPackageInventory
#1 · 0x56b40
CreateAppxPackageInventoryExtracted
#2 · 0x56e90
CreateSoftwareInventory
#3 · 0x572d0
GetAppInfo
#4 · 0xc1d0
GetAppInventory
#5 · 0x58500
GetCachedAppInventory
#6 · 0xcfb0
GetDetailedAppInventory
#7 · 0x5a890
GetDetailedAppInventoryFile
#8 · 0x5c070
UpdateSoftwareInventoryW
#9 · 0x5ccc0
No function matches your filter.
Imported DLLs & functions 379
ADVAPI32.dll
36
ConvertSidToStringSidW
0x180097140
CryptAcquireContextW
0x180097158
CryptCreateHash
0x180097160
CryptDestroyHash
0x180097178
CryptGetHashParam
0x180097170
CryptHashData
0x180097168
CryptReleaseContext
0x180097180
EventRegister
0x180097198
EventUnregister
0x180097080
EventWriteTransfer
0x180097188
GetTokenInformation
0x180097148
InitializeSecurityDescriptor
0x180097090
RegCloseKey
0x1800970c0
RegCreateKeyExW
0x1800970f0
RegDeleteKeyExW
0x180097100
RegDeleteKeyValueW
0x1800970a8
RegDeleteKeyW
0x180097118
RegDeleteTreeW
0x1800970e0
RegDeleteValueW
0x1800970b8
RegEnumKeyExW
0x180097120
RegFlushKey
0x180097110
RegGetValueW
0x180097190
RegLoadAppKeyW
0x180097108
RegLoadKeyW
0x180097128
RegOpenKeyExW
0x1800970d0
RegOpenKeyW
0x1800970b0
RegQueryInfoKeyW
0x1800970d8
RegSaveKeyExW
0x1800970e8
RegSetKeySecurity
0x1800970a0
RegSetKeyValueW
0x1800970f8
RegSetValueExW
0x1800970c8
RegUnLoadKeyW
0x180097130
SetEntriesInAclW
0x180097088
SetSecurityDescriptorDacl
0x180097098
SetSecurityDescriptorOwner
0x180097138
TraceEvent
0x180097150
BCryptCloseAlgorithmProvider
0x1800976b8
BCryptCreateHash
0x180097698
BCryptDestroyHash
0x1800976a8
BCryptFinishHash
0x180097690
BCryptGetProperty
0x180097688
BCryptHashData
0x1800976a0
BCryptOpenAlgorithmProvider
0x1800976b0
CertDuplicateCertificateContext
0x1800971b8
CertFreeCertificateContext
0x1800971a8
CertGetCertificateContextProperty
0x1800971c0
CertGetNameStringW
0x1800971b0
KERNEL32.dll
114
AcquireSRWLockExclusive
0x1800971f8
AcquireSRWLockShared
0x180097208
CloseHandle
0x180097218
CloseThreadpoolTimer
0x1800972a8
CreateActCtxW
0x180097498
CreateEventW
0x180097420
CreateFileMappingW
0x1800974c8
CreateFileW
0x180097318
CreateMutexExW
0x180097280
CreateMutexW
0x180097380
CreateSemaphoreExW
0x1800973a8
CreateSemaphoreW
0x180097488
CreateThreadpoolTimer
0x1800972b0
CreateWaitableTimerW
0x180097468
DebugBreak
0x180097328
DecodePointer
0x180097528
DelayLoadFailureHook
0x180097500
DeleteCriticalSection
0x180097350
DeleteFileW
0x180097368
DeviceIoControl
0x180097430
EncodePointer
0x180097520
EnterCriticalSection
0x1800973b0
ExpandEnvironmentStringsW
0x1800972c0
FileTimeToLocalFileTime
0x1800973f0
FileTimeToSystemTime
0x1800973e8
FindClose
0x180097378
FindFirstFileW
0x180097360
FindNextFileW
0x180097370
FormatMessageW
0x1800971e0
FreeEnvironmentStringsW
0x180097548
FreeLibrary
0x180097250
GetCommandLineW
0x1800973d8
GetCurrentDirectoryW
0x180097408
GetCurrentProcess
0x1800972e0
GetCurrentProcessId
0x1800972f8
GetCurrentThread
0x180097240
GetCurrentThreadId
0x1800971d8
GetDriveTypeW
0x180097410
GetEnvironmentStringsW
0x180097540
GetFileAttributesW
0x180097340
GetFileSize
0x1800974c0
GetFileTime
0x180097428
GetLastError
0x180097220
GetLogicalDriveStringsW
0x1800974b0
GetLongPathNameW
0x1800973f8
GetModuleFileNameA
0x1800973a0
GetModuleFileNameW
0x180097310
GetModuleHandleExA
0x180097320
GetModuleHandleExW
0x180097260
GetModuleHandleW
0x180097338
GetProcAddress
0x180097258
GetProcessHeap
0x1800971f0
GetStringTypeW
0x180097518
GetSystemDirectoryW
0x180097458
GetSystemFirmwareTable
0x180097490
GetSystemInfo
0x180097418
GetSystemPowerStatus
0x180097298
GetSystemTimeAsFileTime
0x180097300
GetSystemWindowsDirectoryW
0x180097348
GetTempFileNameW
0x180097398
GetTempPathW
0x180097390
GetTickCount
0x180097230
GetVolumeInformationByHandleW
0x180097438
HeapAlloc
0x1800971e8
HeapFree
0x1800971d0
HeapReAlloc
0x180097440
InitializeCriticalSectionEx
0x180097358
InitOnceExecuteOnce
0x180097550
IsDebuggerPresent
0x180097278
K32EnumProcesses
0x1800974e0
LeaveCriticalSection
0x1800973c0
LoadLibraryExA
0x1800974f8
LoadLibraryExW
0x180097330
LoadLibraryW
0x180097270
LocalAlloc
0x180097400
LocaleNameToLCID
0x180097450
LocalFree
0x1800972c8
MapViewOfFile
0x1800974d0
MoveFileExW
0x1800973e0
MultiByteToWideChar
0x180097510
OpenProcess
0x1800974e8
OpenSemaphoreW
0x180097288
OpenWaitableTimerW
0x180097478
OutputDebugStringA
0x180097308
OutputDebugStringW
0x180097558
QueryActCtxW
0x1800974a0
QueryDosDeviceW
0x1800974b8
QueryFullProcessImageNameW
0x1800974f0
QueryPerformanceCounter
0x1800972f0
QueryThreadCycleTime
0x180097238
RaiseException
0x180097448
ReleaseActCtx
0x1800974a8
ReleaseMutex
0x180097388
ReleaseSemaphore
0x1800973b8
ReleaseSRWLockExclusive
0x180097200
ReleaseSRWLockShared
0x180097210
SetEvent
0x180097480
SetLastError
0x180097228
SetThreadpoolTimer
0x1800973c8
SetUnhandledExceptionFilter
0x1800972d8
SetWaitableTimer
0x180097460
Sleep
0x180097248
SleepConditionVariableSRW
0x180097538
TerminateProcess
0x1800972e8
UnhandledExceptionFilter
0x1800972d0
UnmapViewOfFile
0x1800974d8
VerifyVersionInfoW
0x180097268
WaitForMultipleObjects
0x180097470
WaitForSingleObject
0x180097290
WaitForSingleObjectEx
0x1800973d0
WaitForThreadpoolTimerCallbacks
0x1800972a0
WakeAllConditionVariable
0x180097530
WideCharToMultiByte
0x180097508
WriteFile
0x1800972b8
msi.dll
12
0x1800976c8
0x1800976d0
0x1800976d8
0x1800976e0
0x1800976e8
0x1800976f0
0x1800976f8
0x180097700
0x180097708
0x180097710
0x180097718
0x180097720
msvcrt.dll
101
___lc_codepage_func
0x1800978a0
___lc_collate_cp_func
0x1800978c8
___lc_handle_func
0x180097898
___mb_cur_max_func
0x180097890
__C_specific_handler
0x180097960
__crtCompareStringW
0x180097930
__crtLCMapStringW
0x180097928
__CxxFrameHandler3
0x180097a50
__dllonexit
0x180097940
__mb_cur_max
0x1800977e0
__pctype_func
0x1800978b0
__uncaught_exception
0x1800978c0
_amsg_exit
0x180097980
_CxxThrowException
0x1800979a0
_errno
0x180097a00
_fseeki64
0x1800977c8
_initterm
0x180097968
_ismbblead
0x1800978a8
_lock
0x180097950
_mktime64
0x180097810
_onexit
0x180097910
_purecall
0x180097a38
_set_errno
0x1800979f0
_unlock
0x180097948
_vscwprintf
0x1800977e8
_vsnprintf
0x1800979c0
_vsnprintf_s
0x180097a18
_vsnwprintf
0x180097a48
_vsnwprintf_s
0x1800977d0
_wcsdup
0x1800979d8
_wcsicmp
0x1800979b8
_wcslwr
0x180097840
_wcsnicmp
0x1800979d0
_wctime64
0x180097818
_wfsopen
0x1800978e0
_wsetlocale
0x180097920
_wsplitpath_s
0x180097758
_wtoi
0x1800977f0
_wtoi64
0x180097778
_XcptFilter
0x180097988
??0bad_cast@@QEAA@AEBV0@@Z
0x1800977b0
??0bad_cast@@QEAA@PEBD@Z
0x180097798
??0exception@@QEAA@AEBQEBD@Z
0x1800979b0
??0exception@@QEAA@AEBQEBDH@Z
0x1800979a8
??0exception@@QEAA@AEBV0@@Z
0x180097a20
??0exception@@QEAA@XZ
0x180097a28
??1bad_cast@@UEAA@XZ
0x180097938
??1exception@@UEAA@XZ
0x180097a30
??1type_info@@UEAA@XZ
0x180097908
?terminate@@YAXXZ
0x180097958
?what@exception@@UEBAPEBDXZ
0x1800979e0
abort
0x1800978f0
calloc
0x1800978b8
fclose
0x180097878
fflush
0x1800977a8
fgetc
0x180097730
fgetpos
0x1800977d8
fgetwc
0x180097750
fputwc
0x180097760
free
0x180097978
fseek
0x1800978d8
fsetpos
0x1800977c0
fwrite
0x180097870
isdigit
0x180097880
iswalpha
0x1800978e8
iswcntrl
0x1800977f8
iswspace
0x180097800
malloc
0x180097970
memcmp
0x1800978d0
memcpy
0x180097998
memcpy_s
0x180097a40
memmove
0x180097990
memmove_s
0x180097820
memset
0x180097918
realloc
0x180097790
setlocale
0x180097888
setvbuf
0x1800977b8
sprintf_s
0x180097a10
strchr
0x1800979e8
strcmp
0x180097900
strcpy_s
0x180097868
strncmp
0x180097828
strncpy_s
0x180097a08
strnlen
0x180097770
strtol
0x1800979f8
tolower
0x180097808
toupper
0x180097830
towlower
0x180097780
ungetc
0x180097768
ungetwc
0x1800977a0
wcscat_s
0x180097848
wcschr
0x180097860
wcscmp
0x180097740
wcscpy_s
0x180097850
wcsncmp
0x180097838
wcsrchr
0x180097858
wcsspn
0x1800978f8
wcsstr
0x1800979c8
wcstok_s
0x180097738
wcstombs
0x180097788
wcstoul
0x180097748
ntdll.dll
70
EtwEventRegister
0x180097b58
EtwEventUnregister
0x180097b68
EtwEventWrite
0x180097b60
EtwEventWriteNoRegistration
0x180097c70
EtwTraceMessage
0x180097a70
LdrResSearchResource
0x180097ae8
NtLoadKeyEx
0x180097a90
NtQueryKey
0x180097ab0
NtQueryLicenseValue
0x180097a78
RtlAdjustPrivilege
0x180097ad0
RtlAllocateAndInitializeSid
0x180097ac0
RtlAllocateHeap
0x180097c58
RtlAnsiStringToUnicodeString
0x180097b40
RtlAppendUnicodeStringToString
0x180097bb0
RtlAppendUnicodeToString
0x180097ba8
RtlCaptureContext
0x180097c78
RtlCompareMemory
0x180097c20
RtlComputeCrc32
0x180097c18
RtlCopyUnicodeString
0x180097c50
RtlDeleteCriticalSection
0x180097c60
RtlDosPathNameToNtPathName_U_WithStatus
0x180097be8
RtlDosPathNameToRelativeNtPathName_U
0x180097a98
RtlEnterCriticalSection
0x180097c30
RtlEqualString
0x180097c40
RtlFormatCurrentUserKeyPath
0x180097ba0
RtlFreeHeap
0x180097c00
RtlFreeSid
0x180097ab8
RtlFreeUnicodeString
0x180097bd0
RtlGetNativeSystemInformation
0x180097b10
RtlGetVersion
0x180097a80
RtlImageDirectoryEntryToData
0x180097ad8
RtlInitAnsiString
0x180097c28
RtlInitializeCriticalSection
0x180097c08
RtlInitString
0x180097b50
RtlInitUnicodeString
0x180097be0
RtlInitUnicodeStringEx
0x180097bc0
RtlLeaveCriticalSection
0x180097bf8
RtlLookupFunctionEntry
0x180097c88
RtlMultiByteToUnicodeN
0x180097c10
RtlNtPathNameToDosPathName
0x180097b18
RtlNtStatusToDosError
0x180097ac8
RtlpEnsureBufferSize
0x180097b20
RtlRandomEx
0x180097aa8
RtlReAllocateHeap
0x180097c38
RtlReleaseRelativeName
0x180097a88
RtlRunOnceExecuteOnce
0x180097c48
RtlSecondsSince1970ToTime
0x180097b70
RtlStringFromGUID
0x180097aa0
RtlTimeToTimeFields
0x180097af0
RtlUpcaseUnicodeChar
0x180097b30
RtlUpcaseUnicodeString
0x180097b38
RtlVerifyVersionInfo
0x180097ae0
RtlVirtualUnwind
0x180097c80
RtlxAnsiStringToUnicodeSize
0x180097b48
VerSetConditionMask
0x180097a68
WinSqmIsOptedInEx
0x180097c68
ZwClose
0x180097bf0
ZwCreateFile
0x180097b98
ZwCreateSection
0x180097b88
ZwEnumerateKey
0x180097a60
ZwMapViewOfSection
0x180097af8
ZwOpenFile
0x180097bd8
ZwOpenKey
0x180097bc8
ZwQueryDirectoryFile
0x180097b28
ZwQueryInformationFile
0x180097b90
ZwQueryInformationProcess
0x180097b80
ZwQuerySystemInformation
0x180097b08
ZwQueryValueKey
0x180097bb8
ZwSetInformationProcess
0x180097b78
ZwUnmapViewOfSection
0x180097b00
CoCreateInstance
0x180097cb0
CoInitializeEx
0x180097c98
CoTaskMemFree
0x180097ca8
CoUninitialize
0x180097cb8
PropVariantClear
0x180097ca0
SysAllocString
0x180097588
SysFreeString
0x180097580
SysStringLen
0x180097590
VariantChangeType
0x180097578
VariantClear
0x180097568
VariantCopy
0x180097570
VariantInit
0x180097598
UuidCreate
0x1800975a8
CommandLineToArgvW
0x1800975c0
SHCreateItemFromIDList
0x1800975d8
SHCreateItemFromParsingName
0x1800975b8
SHGetFolderPathW
0x1800975d0
SHGetKnownFolderPath
0x1800975c8
0x180097608
PathCommonPrefixW
0x180097618
PathFileExistsW
0x1800975e8
PathFindFileNameW
0x180097610
PathIsNetworkPathW
0x1800975f0
PathUnExpandEnvStringsW
0x180097600
SHCreateStreamOnFileEx
0x1800975f8
CryptCATAdminAcquireContext
0x180097668
CryptCATAdminCalcHashFromFileHandle
0x180097638
CryptCATAdminEnumCatalogFromHash
0x180097660
CryptCATAdminReleaseCatalogContext
0x180097628
CryptCATAdminReleaseContext
0x180097650
CryptCATCatalogInfoFromContext
0x180097630
WinVerifyTrust
0x180097658
WTHelperGetProvSignerFromChain
0x180097640
WTHelperProvDataFromStateData
0x180097648
CreateXmlReader
0x180097678
No function matches your filter.