aepic.dll

Description: Application Experience Program Cache

Version: 10.0.19041.6280

Architecture: 32-bit

Operating System: Windows NT

SHA256: 52a010949ba7eceb9ed072178517b8a2

File Size: 488.5 KB

Uploaded At: Dec. 1, 2025, 7:52 a.m.

Views: 9

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

GetAppInventoryCore (Ordinal: 1, Address: 0x28550)
UpdateSoftwareInventoryTC2 (Ordinal: 2, Address: 0x43ac0)
DllCanUnloadNow (Ordinal: 3, Address: 0x3c530)
DllGetActivationFactory (Ordinal: 4, Address: 0x3c550)
GetPrivacyLevel (Ordinal: 5, Address: 0x269b0)
PicAmiClose (Ordinal: 6, Address: 0x24200)
PicAmiInitialize (Ordinal: 7, Address: 0x3b960)
PicFreeFileInfo (Ordinal: 8, Address: 0x1a3c0)
PicRetrieveFileInfo (Ordinal: 9, Address: 0x162a0)
PicRetrieveFileInfoAppx (Ordinal: 10, Address: 0x3b970)
PicRetrieveFileLastRunTime (Ordinal: 11, Address: 0x25cd0)
PicUpdateFileLastRunTime (Ordinal: 12, Address: 0x261a0)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x10074028)
CoCreateInstance (Address: 0x10074048)
CoGetApartmentType (Address: 0x10074054)
CoGetCallContext (Address: 0x10074058)
CoGetInterfaceAndReleaseStream (Address: 0x10074050)
CoInitializeEx (Address: 0x10074044)
CoMarshalInterface (Address: 0x10074030)
CoReleaseMarshalData (Address: 0x10074024)
CoTaskMemAlloc (Address: 0x10074038)
CoTaskMemFree (Address: 0x1007403c)
CoUninitialize (Address: 0x1007402c)
CoWaitForMultipleHandles (Address: 0x1007404c)
CreateStreamOnHGlobal (Address: 0x10074040)
PropVariantClear (Address: 0x10074034)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x10074060)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x10074068)
IsDebuggerPresent (Address: 0x1007406c)
OutputDebugStringA (Address: 0x10074074)
OutputDebugStringW (Address: 0x10074070)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1007407c)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x10074084)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x10074094)
RaiseException (Address: 0x1007409c)
SetLastError (Address: 0x10074098)
SetUnhandledExceptionFilter (Address: 0x10074090)
UnhandledExceptionFilter (Address: 0x1007408c)

api-ms-win-core-featurestaging-l1-1-0.dll

GetFeatureEnabledState (Address: 0x100740b0)
RecordFeatureUsage (Address: 0x100740ac)
SubscribeFeatureStateChangeNotification (Address: 0x100740a8)
UnsubscribeFeatureStateChangeNotification (Address: 0x100740a4)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x100740d4)
DeleteFileW (Address: 0x100740dc)
FindClose (Address: 0x100740bc)
FindFirstFileW (Address: 0x100740e8)
FindNextFileW (Address: 0x100740e0)
GetDriveTypeW (Address: 0x100740e4)
GetFileAttributesW (Address: 0x100740d8)
GetFileTime (Address: 0x100740ec)
GetLogicalDriveStringsW (Address: 0x100740c4)
GetLongPathNameW (Address: 0x100740c8)
GetTempFileNameW (Address: 0x100740d0)
GetVolumeInformationByHandleW (Address: 0x100740b8)
QueryDosDeviceW (Address: 0x100740c0)
WriteFile (Address: 0x100740cc)

api-ms-win-core-file-l1-2-0.dll

GetTempPathW (Address: 0x100740f4)

api-ms-win-core-file-l2-1-0.dll

MoveFileExW (Address: 0x100740fc)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x10074104)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1007410c)
HeapAlloc (Address: 0x10074114)
HeapFree (Address: 0x10074118)
HeapReAlloc (Address: 0x10074110)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x10074124)
LocalFree (Address: 0x10074120)

api-ms-win-core-io-l1-1-0.dll

DeviceIoControl (Address: 0x1007412c)

api-ms-win-core-kernel32-legacy-l1-1-1.dll

VerifyVersionInfoW (Address: 0x10074134)

api-ms-win-core-libraryloader-l1-2-0.dll

FreeLibrary (Address: 0x10074148)
FreeLibraryAndExitThread (Address: 0x10074158)
GetModuleFileNameA (Address: 0x10074144)
GetModuleFileNameW (Address: 0x1007415c)
GetModuleHandleExA (Address: 0x1007413c)
GetModuleHandleExW (Address: 0x10074150)
GetModuleHandleW (Address: 0x1007414c)
GetProcAddress (Address: 0x10074154)
LoadLibraryExW (Address: 0x10074140)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryA (Address: 0x10074168)
LoadLibraryW (Address: 0x10074164)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x10074170)
LocaleNameToLCID (Address: 0x10074174)

api-ms-win-core-namedpipe-l1-1-0.dll

SetNamedPipeHandleState (Address: 0x10074180)
WaitNamedPipeW (Address: 0x1007417c)

api-ms-win-core-path-l1-1-0.dll

PathAllocCombine (Address: 0x1007418c)
PathCchCanonicalizeEx (Address: 0x10074190)
PathCchRemoveFileSpec (Address: 0x10074188)

api-ms-win-core-processenvironment-l1-1-0.dll

GetCommandLineW (Address: 0x1007419c)
GetCurrentDirectoryW (Address: 0x10074198)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x100741a4)
GetCurrentProcess (Address: 0x100741d0)
GetCurrentProcessId (Address: 0x100741a8)
GetCurrentThread (Address: 0x100741c0)
GetCurrentThreadId (Address: 0x100741c8)
GetThreadPriority (Address: 0x100741ac)
OpenProcessToken (Address: 0x100741b4)
ResumeThread (Address: 0x100741b8)
SetThreadPriority (Address: 0x100741bc)
TerminateProcess (Address: 0x100741d4)
TlsAlloc (Address: 0x100741b0)
TlsGetValue (Address: 0x100741cc)
TlsSetValue (Address: 0x100741c4)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x100741dc)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x100741e4)

api-ms-win-core-realtime-l1-1-0.dll

QueryThreadCycleTime (Address: 0x100741ec)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x10074228)
RegCreateKeyExW (Address: 0x10074224)
RegDeleteKeyExW (Address: 0x10074214)
RegDeleteTreeW (Address: 0x100741fc)
RegDeleteValueW (Address: 0x1007421c)
RegEnumKeyExW (Address: 0x100741f8)
RegFlushKey (Address: 0x100741f4)
RegGetValueW (Address: 0x10074208)
RegLoadAppKeyW (Address: 0x1007420c)
RegLoadKeyW (Address: 0x10074218)
RegOpenKeyExW (Address: 0x1007422c)
RegQueryInfoKeyW (Address: 0x10074210)
RegSaveKeyExW (Address: 0x10074204)
RegSetKeySecurity (Address: 0x10074200)
RegSetValueExW (Address: 0x10074220)
RegUnLoadKeyW (Address: 0x10074230)

api-ms-win-core-registry-l1-1-1.dll

RegDeleteKeyValueW (Address: 0x1007423c)
RegSetKeyValueW (Address: 0x10074238)

api-ms-win-core-registry-l2-1-0.dll

RegDeleteKeyW (Address: 0x10074244)
RegOpenKeyW (Address: 0x10074248)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFileExistsW (Address: 0x10074250)
PathUnExpandEnvStringsW (Address: 0x10074254)

api-ms-win-core-sidebyside-l1-1-0.dll

CreateActCtxW (Address: 0x10074264)
QueryActCtxW (Address: 0x10074260)
ReleaseActCtx (Address: 0x1007425c)

api-ms-win-core-string-l1-1-0.dll

GetStringTypeW (Address: 0x10074274)
MultiByteToWideChar (Address: 0x10074270)
WideCharToMultiByte (Address: 0x1007426c)

api-ms-win-core-string-l2-1-1.dll

SHLoadIndirectString (Address: 0x1007427c)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x100742dc)
AcquireSRWLockShared (Address: 0x100742b8)
CreateEventExW (Address: 0x100742cc)
CreateEventW (Address: 0x100742d4)
CreateMutexExW (Address: 0x100742c0)
CreateMutexW (Address: 0x100742b4)
CreateSemaphoreExW (Address: 0x100742a8)
DeleteCriticalSection (Address: 0x100742ac)
EnterCriticalSection (Address: 0x100742a4)
InitializeCriticalSection (Address: 0x100742c4)
InitializeCriticalSectionEx (Address: 0x10074294)
InitializeSRWLock (Address: 0x10074288)
LeaveCriticalSection (Address: 0x100742d0)
OpenSemaphoreW (Address: 0x10074290)
OpenWaitableTimerW (Address: 0x100742c8)
ReleaseMutex (Address: 0x1007429c)
ReleaseSemaphore (Address: 0x100742a0)
ReleaseSRWLockExclusive (Address: 0x100742b0)
ReleaseSRWLockShared (Address: 0x10074298)
SetEvent (Address: 0x100742d8)
SetWaitableTimer (Address: 0x100742bc)
WaitForSingleObject (Address: 0x10074284)
WaitForSingleObjectEx (Address: 0x1007428c)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x100742ec)
InitOnceComplete (Address: 0x100742f4)
InitOnceExecuteOnce (Address: 0x100742f0)
Sleep (Address: 0x100742e8)
SleepConditionVariableSRW (Address: 0x100742e4)
WakeAllConditionVariable (Address: 0x100742f8)

api-ms-win-core-synch-l1-2-1.dll

CreateSemaphoreW (Address: 0x10074300)
CreateWaitableTimerW (Address: 0x10074304)
WaitForMultipleObjects (Address: 0x10074308)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemDirectoryA (Address: 0x10074314)
GetSystemDirectoryW (Address: 0x10074324)
GetSystemInfo (Address: 0x10074310)
GetSystemTimeAsFileTime (Address: 0x10074318)
GetSystemWindowsDirectoryW (Address: 0x1007431c)
GetTickCount (Address: 0x10074328)
GetTickCount64 (Address: 0x10074320)

api-ms-win-core-sysinfo-l1-2-0.dll

GetSystemFirmwareTable (Address: 0x10074330)

api-ms-win-core-threadpool-l1-2-0.dll

CallbackMayRunLong (Address: 0x10074344)
CloseThreadpoolTimer (Address: 0x10074348)
CreateThreadpoolTimer (Address: 0x10074338)
FreeLibraryWhenCallbackReturns (Address: 0x1007433c)
SetThreadpoolTimer (Address: 0x10074340)
TrySubmitThreadpoolCallback (Address: 0x1007434c)
WaitForThreadpoolTimerCallbacks (Address: 0x10074350)

api-ms-win-core-timezone-l1-1-0.dll

FileTimeToSystemTime (Address: 0x10074358)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x10074364)
EncodePointer (Address: 0x10074360)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x10074374)
RoOriginateErrorW (Address: 0x10074378)
RoTransformError (Address: 0x10074370)
SetRestrictedErrorInfo (Address: 0x1007436c)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x10074388)
RoGetMatchingRestrictedErrorInfo (Address: 0x10074380)
RoReportFailedDelegate (Address: 0x10074384)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x10074390)
RoGetActivationFactory (Address: 0x10074394)
RoInitialize (Address: 0x1007439c)
RoUninitialize (Address: 0x10074398)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateString (Address: 0x100743a4)
WindowsCreateStringReference (Address: 0x100743b0)
WindowsDeleteString (Address: 0x100743b8)
WindowsDuplicateString (Address: 0x100743a8)
WindowsGetStringRawBuffer (Address: 0x100743b4)
WindowsIsStringEmpty (Address: 0x100743ac)
WindowsStringHasEmbeddedNull (Address: 0x100743bc)

api-ms-win-core-wow64-l1-1-0.dll

IsWow64Process (Address: 0x100743c4)

api-ms-win-eventing-classicprovider-l1-1-0.dll

TraceEvent (Address: 0x100743cc)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x100743d4)
EventSetInformation (Address: 0x100743dc)
EventUnregister (Address: 0x100743e0)
EventWriteTransfer (Address: 0x100743d8)

api-ms-win-security-base-l1-1-0.dll

DuplicateTokenEx (Address: 0x100743f4)
GetTokenInformation (Address: 0x100743f8)
InitializeSecurityDescriptor (Address: 0x100743ec)
SetSecurityDescriptorDacl (Address: 0x100743e8)
SetSecurityDescriptorOwner (Address: 0x100743f0)

api-ms-win-security-capability-l1-1-0.dll

CapabilityCheck (Address: 0x10074400)

api-ms-win-security-cryptoapi-l1-1-0.dll

CryptAcquireContextW (Address: 0x10074410)
CryptCreateHash (Address: 0x10074414)
CryptDestroyHash (Address: 0x1007440c)
CryptGetHashParam (Address: 0x1007441c)
CryptHashData (Address: 0x10074408)
CryptReleaseContext (Address: 0x10074418)

api-ms-win-security-provider-l1-1-0.dll

SetEntriesInAclW (Address: 0x10074424)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x1007442c)

api-ms-win-shcore-obsolete-l1-1-0.dll

CommandLineToArgvW (Address: 0x10074434)

api-ms-win-shcore-path-l1-1-0.dll

(Address: 0x1007443c)

api-ms-win-shcore-thread-l1-1-0.dll

GetProcessReference (Address: 0x1007444c)
SetProcessReference (Address: 0x10074448)
SHGetThreadRef (Address: 0x10074444)
SHSetThreadRef (Address: 0x10074450)

bcrypt.dll

BCryptCloseAlgorithmProvider (Address: 0x1007445c)
BCryptCreateHash (Address: 0x10074468)
BCryptDestroyHash (Address: 0x10074460)
BCryptFinishHash (Address: 0x1007446c)
BCryptGetProperty (Address: 0x10074458)
BCryptHashData (Address: 0x10074464)
BCryptOpenAlgorithmProvider (Address: 0x10074470)

msvcrt.dll

___lc_codepage_func (Address: 0x100744e4)
___lc_collate_cp_func (Address: 0x100744f8)
___lc_handle_func (Address: 0x100744e0)
___mb_cur_max_func (Address: 0x100744dc)
__crtCompareStringW (Address: 0x100744fc)
__crtLCMapStringW (Address: 0x100744f4)
__CxxFrameHandler3 (Address: 0x10074508)
__dllonexit (Address: 0x10074518)
__pctype_func (Address: 0x100744e8)
_amsg_exit (Address: 0x1007452c)
_CxxThrowException (Address: 0x10074534)
_errno (Address: 0x1007454c)
_except_handler4_common (Address: 0x1007450c)
_initterm (Address: 0x10074528)
_lock (Address: 0x10074520)
_onexit (Address: 0x10074514)
_purecall (Address: 0x10074590)
_set_errno (Address: 0x10074544)
_strnicmp (Address: 0x10074574)
_unlock (Address: 0x1007451c)
_vscwprintf (Address: 0x100744a8)
_vsnprintf (Address: 0x10074564)
_vsnprintf_s (Address: 0x10074580)
_vsnwprintf (Address: 0x10074598)
_vsnwprintf_s (Address: 0x10074538)
_wcsicmp (Address: 0x10074570)
_wcslwr (Address: 0x10074488)
_wcsnicmp (Address: 0x100744ec)
_wsplitpath_s (Address: 0x10074540)
_wtoi (Address: 0x10074490)
_wtoi64 (Address: 0x10074494)
_XcptFilter (Address: 0x10074530)
??0bad_cast@@QAE@ABV0@@Z (Address: 0x100744ac)
??0exception@@QAE@ABQBD@Z (Address: 0x10074568)
??0exception@@QAE@ABV0@@Z (Address: 0x10074584)
??0exception@@QAE@XZ (Address: 0x10074588)
??1bad_cast@@UAE@XZ (Address: 0x100744b0)
??1exception@@UAE@XZ (Address: 0x1007458c)
??1type_info@@UAE@XZ (Address: 0x10074510)
?terminate@@YAXXZ (Address: 0x10074524)
?what@exception@@UBEPBDXZ (Address: 0x1007456c)
abort (Address: 0x10074504)
calloc (Address: 0x100744f0)
free (Address: 0x1007455c)
iscntrl (Address: 0x100744a0)
isspace (Address: 0x1007449c)
iswcntrl (Address: 0x1007459c)
iswspace (Address: 0x10074498)
malloc (Address: 0x10074560)
memcmp (Address: 0x10074500)
memcpy (Address: 0x100744d0)
memcpy_s (Address: 0x10074594)
memmove (Address: 0x100744d8)
memmove_s (Address: 0x1007457c)
memset (Address: 0x100745a0)
realloc (Address: 0x10074558)
setlocale (Address: 0x100744cc)
sprintf_s (Address: 0x10074554)
strchr (Address: 0x1007453c)
strcpy_s (Address: 0x100744c4)
strerror (Address: 0x100744d4)
strncmp (Address: 0x10074484)
strncpy_s (Address: 0x10074550)
strnlen (Address: 0x100744b8)
strrchr (Address: 0x10074578)
strtol (Address: 0x10074548)
tolower (Address: 0x100744a4)
towlower (Address: 0x1007448c)
wcscat_s (Address: 0x1007447c)
wcschr (Address: 0x100744c8)
wcscpy_s (Address: 0x10074478)
wcsrchr (Address: 0x100744c0)
wcsstr (Address: 0x10074480)
wcstombs (Address: 0x100744b4)
wcstoul (Address: 0x100744bc)

ntdll.dll

EtwEventRegister (Address: 0x10074600)
EtwEventUnregister (Address: 0x10074608)
EtwEventWrite (Address: 0x10074604)
EtwTraceMessage (Address: 0x1007467c)
LdrResSearchResource (Address: 0x100745d8)
NtLoadKeyEx (Address: 0x100745ac)
NtQueryKey (Address: 0x100745bc)
NtQueryLicenseValue (Address: 0x10074610)
RtlAdjustPrivilege (Address: 0x100745cc)
RtlAllocateAndInitializeSid (Address: 0x100745c4)
RtlAllocateHeap (Address: 0x1007466c)
RtlAnsiStringToUnicodeString (Address: 0x100745f4)
RtlAppendUnicodeStringToString (Address: 0x1007463c)
RtlAppendUnicodeToString (Address: 0x10074638)
RtlDeleteCriticalSection (Address: 0x10074624)
RtlDosPathNameToNtPathName_U_WithStatus (Address: 0x10074658)
RtlDosPathNameToRelativeNtPathName_U (Address: 0x100745b0)
RtlEnterCriticalSection (Address: 0x1007461c)
RtlEqualString (Address: 0x10074620)
RtlFreeHeap (Address: 0x10074664)
RtlFreeSid (Address: 0x100745c0)
RtlFreeUnicodeString (Address: 0x10074650)
RtlGetNativeSystemInformation (Address: 0x100745ec)
RtlGetVersion (Address: 0x10074678)
RtlImageDirectoryEntryToData (Address: 0x100745d0)
RtlInitAnsiString (Address: 0x10074618)
RtlInitializeCriticalSection (Address: 0x10074660)
RtlInitString (Address: 0x100745fc)
RtlInitUnicodeString (Address: 0x10074654)
RtlInitUnicodeStringEx (Address: 0x10074644)
RtlLeaveCriticalSection (Address: 0x1007460c)
RtlMultiByteToUnicodeN (Address: 0x10074614)
RtlNtStatusToDosError (Address: 0x100745c8)
RtlRandomEx (Address: 0x100745b8)
RtlReAllocateHeap (Address: 0x10074668)
RtlReleaseRelativeName (Address: 0x100745a8)
RtlSecondsSince1970ToTime (Address: 0x10074628)
RtlStringFromGUID (Address: 0x100745b4)
RtlTimeToTimeFields (Address: 0x100745dc)
RtlUpcaseUnicodeChar (Address: 0x100745f0)
RtlVerifyVersionInfo (Address: 0x100745d4)
RtlxAnsiStringToUnicodeSize (Address: 0x100745f8)
VerSetConditionMask (Address: 0x10074674)
WinSqmIsOptedInEx (Address: 0x10074670)
ZwClose (Address: 0x1007465c)
ZwCreateFile (Address: 0x10074634)
ZwCreateSection (Address: 0x1007462c)
ZwEnumerateKey (Address: 0x10074648)
ZwMapViewOfSection (Address: 0x100745e0)
ZwOpenKey (Address: 0x1007464c)
ZwQueryInformationFile (Address: 0x10074630)
ZwQuerySystemInformation (Address: 0x100745e8)
ZwQueryValueKey (Address: 0x10074640)
ZwUnmapViewOfSection (Address: 0x100745e4)

OLEAUT32.dll

SysAllocString (Address: 0x1007400c)
SysFreeString (Address: 0x10074004)
VariantChangeType (Address: 0x10074000)
VariantClear (Address: 0x10074014)
VariantCopy (Address: 0x10074010)
VariantInit (Address: 0x10074008)

RPCRT4.dll

UuidCreate (Address: 0x1007401c)