ipcfile.dll

Description: Microsoft Active Directory Rights Management Services File API

Authors: Copyright (c) Microsoft Corporation. All rights reserved.

Version: 1.0.5225.0

Architecture: 64-bit

Operating System: Windows

SHA256: efaa085b21f290a8b3da64dcaaf1fb6a

File Size: 508.9 KB

Uploaded At: Dec. 4, 2025, 6:14 a.m.

Views: 6

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • (Ordinal: 1, Address: 0x50d0)
  • (Ordinal: 2, Address: 0x6470)
  • (Ordinal: 3, Address: 0x8da0)
  • (Ordinal: 4, Address: 0x8480)
  • (Ordinal: 5, Address: 0x40e0)
  • (Ordinal: 6, Address: 0x5e70)
  • (Ordinal: 7, Address: 0x7200)
  • (Ordinal: 8, Address: 0x77f0)
  • (Ordinal: 9, Address: 0x8a00)
  • (Ordinal: 10, Address: 0x8bc0)
  • (Ordinal: 11, Address: 0x7de0)
  • (Ordinal: 12, Address: 0x8db0)
  • (Ordinal: 13, Address: 0x92c0)
  • (Ordinal: 14, Address: 0x98c0)
  • (Ordinal: 15, Address: 0x9c20)
  • (Ordinal: 16, Address: 0xa170)
  • (Ordinal: 17, Address: 0xa5c0)
  • (Ordinal: 18, Address: 0xab50)
  • (Ordinal: 19, Address: 0xb0d0)
  • (Ordinal: 20, Address: 0x4130)
  • (Ordinal: 21, Address: 0x2e80)
  • (Ordinal: 22, Address: 0x6da0)
  • (Ordinal: 23, Address: 0x5110)
  • (Ordinal: 24, Address: 0x45a0)
  • (Ordinal: 25, Address: 0x3520)
  • (Ordinal: 26, Address: 0x6150)

Imported DLLs & Functions

ADVAPI32.dll
  • AdjustTokenPrivileges (Address: 0x18004a010)
  • EventEnabled (Address: 0x18004a030)
  • EventRegister (Address: 0x18004a000)
  • EventWrite (Address: 0x18004a060)
  • GetNamedSecurityInfoW (Address: 0x18004a028)
  • GetSecurityDescriptorControl (Address: 0x18004a020)
  • LookupPrivilegeValueW (Address: 0x18004a008)
  • OpenProcessToken (Address: 0x18004a058)
  • RegCloseKey (Address: 0x18004a038)
  • RegEnumKeyW (Address: 0x18004a040)
  • RegOpenKeyExW (Address: 0x18004a048)
  • RegQueryValueExW (Address: 0x18004a050)
  • SetNamedSecurityInfoW (Address: 0x18004a018)
api-ms-win-crt-filesystem-l1-1-0.dll
  • _lock_file (Address: 0x18004a5d0)
  • _unlock_file (Address: 0x18004a5d8)
  • _wsplitpath_s (Address: 0x18004a5e0)
api-ms-win-crt-heap-l1-1-0.dll
  • _callnewh (Address: 0x18004a600)
  • free (Address: 0x18004a5f0)
  • malloc (Address: 0x18004a5f8)
api-ms-win-crt-runtime-l1-1-0.dll
  • _cexit (Address: 0x18004a638)
  • _configure_narrow_argv (Address: 0x18004a660)
  • _crt_atexit (Address: 0x18004a610)
  • _execute_onexit_table (Address: 0x18004a618)
  • _initialize_narrow_environment (Address: 0x18004a630)
  • _initialize_onexit_table (Address: 0x18004a628)
  • _initterm (Address: 0x18004a648)
  • _initterm_e (Address: 0x18004a640)
  • _invalid_parameter_noinfo_noreturn (Address: 0x18004a658)
  • _register_onexit_function (Address: 0x18004a620)
  • _seh_filter_dll (Address: 0x18004a650)
api-ms-win-crt-stdio-l1-1-0.dll
  • __stdio_common_vsprintf (Address: 0x18004a680)
  • __stdio_common_vswprintf (Address: 0x18004a670)
  • __stdio_common_vswprintf_s (Address: 0x18004a678)
  • _fseeki64 (Address: 0x18004a698)
  • _get_stream_buffer_pointers (Address: 0x18004a690)
  • fclose (Address: 0x18004a6d8)
  • fflush (Address: 0x18004a6d0)
  • fgetc (Address: 0x18004a6e0)
  • fgetpos (Address: 0x18004a6c0)
  • fputc (Address: 0x18004a688)
  • fread (Address: 0x18004a6a0)
  • fsetpos (Address: 0x18004a6a8)
  • fwrite (Address: 0x18004a6c8)
  • setvbuf (Address: 0x18004a6b8)
  • ungetc (Address: 0x18004a6b0)
api-ms-win-crt-string-l1-1-0.dll
  • _wcsicmp (Address: 0x18004a718)
  • _wcsnicmp (Address: 0x18004a700)
  • strnlen (Address: 0x18004a6f8)
  • towlower (Address: 0x18004a710)
  • wcsncmp (Address: 0x18004a708)
  • wcsnlen (Address: 0x18004a6f0)
KERNEL32.dll
  • AddDllDirectory (Address: 0x18004a0f0)
  • CloseHandle (Address: 0x18004a0b0)
  • CopyFileW (Address: 0x18004a218)
  • CreateEventW (Address: 0x18004a110)
  • CreateFileW (Address: 0x18004a238)
  • DeleteCriticalSection (Address: 0x18004a2b0)
  • DeleteFileW (Address: 0x18004a1e0)
  • EnterCriticalSection (Address: 0x18004a140)
  • FlushFileBuffers (Address: 0x18004a1f8)
  • FormatMessageW (Address: 0x18004a0b8)
  • FreeLibrary (Address: 0x18004a170)
  • GetCurrentProcess (Address: 0x18004a138)
  • GetCurrentProcessId (Address: 0x18004a118)
  • GetCurrentThreadId (Address: 0x18004a078)
  • GetEnvironmentVariableW (Address: 0x18004a080)
  • GetFileAttributesExW (Address: 0x18004a208)
  • GetFileAttributesW (Address: 0x18004a198)
  • GetFileInformationByHandle (Address: 0x18004a1d8)
  • GetFullPathNameW (Address: 0x18004a200)
  • GetLastError (Address: 0x18004a2c0)
  • GetModuleFileNameW (Address: 0x18004a0d8)
  • GetModuleHandleExW (Address: 0x18004a0e0)
  • GetModuleHandleW (Address: 0x18004a168)
  • GetNativeSystemInfo (Address: 0x18004a0a8)
  • GetProcAddress (Address: 0x18004a160)
  • GetSystemInfo (Address: 0x18004a188)
  • GetSystemPreferredUILanguages (Address: 0x18004a090)
  • GetSystemTime (Address: 0x18004a1a0)
  • GetSystemTimeAsFileTime (Address: 0x18004a290)
  • GetSystemWindowsDirectoryW (Address: 0x18004a220)
  • GetTempPathW (Address: 0x18004a230)
  • GetUserPreferredUILanguages (Address: 0x18004a0c0)
  • GetVersionExW (Address: 0x18004a0c8)
  • GetVolumeInformationW (Address: 0x18004a248)
  • InitializeCriticalSectionAndSpinCount (Address: 0x18004a128)
  • InitializeCriticalSectionEx (Address: 0x18004a2c8)
  • InitializeSListHead (Address: 0x18004a298)
  • IsDebuggerPresent (Address: 0x18004a2a0)
  • IsProcessorFeaturePresent (Address: 0x18004a288)
  • LeaveCriticalSection (Address: 0x18004a120)
  • LoadLibraryExA (Address: 0x18004a158)
  • LoadLibraryExW (Address: 0x18004a190)
  • LoadLibraryW (Address: 0x18004a070)
  • LocalAlloc (Address: 0x18004a0d0)
  • LocaleNameToLCID (Address: 0x18004a098)
  • LocalFree (Address: 0x18004a0a0)
  • LockFileEx (Address: 0x18004a1f0)
  • MoveFileW (Address: 0x18004a228)
  • MultiByteToWideChar (Address: 0x18004a150)
  • OpenProcess (Address: 0x18004a250)
  • OutputDebugStringA (Address: 0x18004a2d0)
  • OutputDebugStringW (Address: 0x18004a2a8)
  • QueryPerformanceCounter (Address: 0x18004a1b0)
  • QueryPerformanceFrequency (Address: 0x18004a1a8)
  • RaiseException (Address: 0x18004a2b8)
  • ReadFile (Address: 0x18004a1b8)
  • RemoveDllDirectory (Address: 0x18004a0e8)
  • ReplaceFileW (Address: 0x18004a210)
  • ResetEvent (Address: 0x18004a0f8)
  • RtlCaptureContext (Address: 0x18004a260)
  • RtlLookupFunctionEntry (Address: 0x18004a268)
  • RtlVirtualUnwind (Address: 0x18004a270)
  • SetEndOfFile (Address: 0x18004a1c8)
  • SetEvent (Address: 0x18004a100)
  • SetFileAttributesW (Address: 0x18004a240)
  • SetFilePointerEx (Address: 0x18004a1e8)
  • SetLastError (Address: 0x18004a088)
  • SetUnhandledExceptionFilter (Address: 0x18004a280)
  • Sleep (Address: 0x18004a108)
  • TerminateProcess (Address: 0x18004a130)
  • UnhandledExceptionFilter (Address: 0x18004a278)
  • UnlockFileEx (Address: 0x18004a1d0)
  • VirtualProtect (Address: 0x18004a180)
  • VirtualQuery (Address: 0x18004a178)
  • WaitForSingleObjectEx (Address: 0x18004a258)
  • WideCharToMultiByte (Address: 0x18004a148)
  • WriteFile (Address: 0x18004a1c0)
MSVCP140.dll
  • ?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z (Address: 0x18004a3a0)
  • ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x18004a398)
  • ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ (Address: 0x18004a3b0)
  • ?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ (Address: 0x18004a378)
  • ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ (Address: 0x18004a388)
  • ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x18004a4f8)
  • ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x18004a428)
  • ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ (Address: 0x18004a308)
  • ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ (Address: 0x18004a470)
  • ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ (Address: 0x18004a330)
  • ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ (Address: 0x18004a448)
  • ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ (Address: 0x18004a4f0)
  • ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x18004a420)
  • ?_Xbad_function_call@std@@YAXXZ (Address: 0x18004a3c8)
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18004a2e0)
  • ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x18004a490)
  • ??0_Lockit@std@@QEAA@H@Z (Address: 0x18004a3b8)
  • ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x18004a320)
  • ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x18004a458)
  • ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z (Address: 0x18004a338)
  • ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z (Address: 0x18004a440)
  • ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z (Address: 0x18004a368)
  • ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ (Address: 0x18004a300)
  • ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x18004a478)
  • ??1_Lockit@std@@QEAA@XZ (Address: 0x18004a3c0)
  • ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x18004a508)
  • ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x18004a438)
  • ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x18004a498)
  • ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x18004a3d0)
  • ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x18004a350)
  • ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ (Address: 0x18004a500)
  • ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x18004a430)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z (Address: 0x18004a4a8)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z (Address: 0x18004a4a0)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z (Address: 0x18004a4b0)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z (Address: 0x18004a3d8)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z (Address: 0x18004a3e0)
  • ??Bid@locale@std@@QEAA_KXZ (Address: 0x18004a340)
  • ?always_noconv@codecvt_base@std@@QEBA_NXZ (Address: 0x18004a348)
  • ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ (Address: 0x18004a310)
  • ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ (Address: 0x18004a468)
  • ?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z (Address: 0x18004a328)
  • ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z (Address: 0x18004a450)
  • ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ (Address: 0x18004a390)
  • ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A (Address: 0x18004a3a8)
  • ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x18004a4b8)
  • ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x18004a3e8)
  • ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z (Address: 0x18004a360)
  • ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z (Address: 0x18004a358)
  • ?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z (Address: 0x18004a370)
  • ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z (Address: 0x18004a4c8)
  • ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z (Address: 0x18004a3f8)
  • ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z (Address: 0x18004a318)
  • ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z (Address: 0x18004a460)
  • ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ (Address: 0x18004a4e8)
  • ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ (Address: 0x18004a418)
  • ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z (Address: 0x18004a2f8)
  • ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z (Address: 0x18004a480)
  • ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z (Address: 0x18004a2f0)
  • ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z (Address: 0x18004a488)
  • ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ (Address: 0x18004a4c0)
  • ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x18004a3f0)
  • ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ (Address: 0x18004a4e0)
  • ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x18004a410)
  • ?uncaught_exception@std@@YA_NXZ (Address: 0x18004a2e8)
  • ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z (Address: 0x18004a380)
  • ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z (Address: 0x18004a4d8)
  • ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z (Address: 0x18004a408)
  • ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z (Address: 0x18004a4d0)
  • ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z (Address: 0x18004a400)
SHLWAPI.dll
  • (Address: 0x18004a518)
VCRUNTIME140.dll
  • __C_specific_handler (Address: 0x18004a5a0)
  • __CxxFrameHandler3 (Address: 0x18004a590)
  • __RTDynamicCast (Address: 0x18004a580)
  • __std_exception_copy (Address: 0x18004a540)
  • __std_exception_destroy (Address: 0x18004a548)
  • __std_terminate (Address: 0x18004a528)
  • __std_type_info_compare (Address: 0x18004a550)
  • __std_type_info_destroy_list (Address: 0x18004a558)
  • _CxxThrowException (Address: 0x18004a568)
  • _purecall (Address: 0x18004a530)
  • memcmp (Address: 0x18004a578)
  • memcpy (Address: 0x18004a598)
  • memmove (Address: 0x18004a570)
  • memset (Address: 0x18004a560)
  • strchr (Address: 0x18004a538)
  • wcsstr (Address: 0x18004a588)
VERSION.dll
  • GetFileVersionInfoExW (Address: 0x18004a5b0)
  • GetFileVersionInfoSizeExW (Address: 0x18004a5c0)
  • VerQueryValueW (Address: 0x18004a5b8)