IpsPlugin.dll

Description: Input Personalization Search Plugin

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: 353da805d7c5e003fb9f4aa5302a3f26

File Size: 144.0 KB

Uploaded At: Dec. 1, 2025, 8:28 a.m.

Views: 32

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x1b90)
DllGetClassObject (Ordinal: 2, Address: 0x2e20)
DllRegisterServer (Ordinal: 3, Address: 0x11b50)
DllUnregisterServer (Ordinal: 4, Address: 0x11bc0)

Imported DLLs & Functions

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18001b8d0)
IsDebuggerPresent (Address: 0x18001b8e8)
OutputDebugStringA (Address: 0x18001b8d8)
OutputDebugStringW (Address: 0x18001b8e0)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18001b8f8)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18001b908)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18001b938)
RaiseException (Address: 0x18001b930)
SetLastError (Address: 0x18001b920)
SetUnhandledExceptionFilter (Address: 0x18001b918)
UnhandledExceptionFilter (Address: 0x18001b928)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x18001b978)
DeleteFileW (Address: 0x18001b948)
FindClose (Address: 0x18001b960)
FindFirstFileW (Address: 0x18001b958)
FindNextFileW (Address: 0x18001b980)
FlushFileBuffers (Address: 0x18001b998)
GetFileAttributesExW (Address: 0x18001b968)
GetFinalPathNameByHandleW (Address: 0x18001b970)
ReadFile (Address: 0x18001b990)
SetFilePointer (Address: 0x18001b950)
WriteFile (Address: 0x18001b988)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18001b9a8)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18001b9c8)
HeapAlloc (Address: 0x18001b9b8)
HeapFree (Address: 0x18001b9c0)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x18001b9d8)
LocalFree (Address: 0x18001b9e0)

api-ms-win-core-io-l1-1-0.dll

GetOverlappedResult (Address: 0x18001b9f0)

api-ms-win-core-io-l1-1-1.dll

CancelIo (Address: 0x18001ba00)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18001ba48)
FindResourceExW (Address: 0x18001ba30)
FreeLibrary (Address: 0x18001ba28)
GetModuleFileNameA (Address: 0x18001ba10)
GetModuleFileNameW (Address: 0x18001ba40)
GetModuleHandleExW (Address: 0x18001ba50)
GetModuleHandleW (Address: 0x18001ba60)
GetProcAddress (Address: 0x18001ba20)
LoadLibraryExW (Address: 0x18001ba58)
LoadResource (Address: 0x18001ba38)
SizeofResource (Address: 0x18001ba18)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18001ba70)

api-ms-win-core-localization-l1-2-2.dll

LCIDToLocaleName (Address: 0x18001ba80)

api-ms-win-core-namedpipe-l1-1-0.dll

ConnectNamedPipe (Address: 0x18001ba98)
CreateNamedPipeW (Address: 0x18001ba90)
DisconnectNamedPipe (Address: 0x18001bab0)
ImpersonateNamedPipeClient (Address: 0x18001baa0)
PeekNamedPipe (Address: 0x18001baa8)

api-ms-win-core-processenvironment-l1-1-0.dll

GetCurrentDirectoryW (Address: 0x18001bac0)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x18001bad0)
GetCurrentProcess (Address: 0x18001baf8)
GetCurrentProcessId (Address: 0x18001baf0)
GetCurrentThread (Address: 0x18001bb00)
GetCurrentThreadId (Address: 0x18001bae0)
GetProcessTimes (Address: 0x18001bb08)
OpenThreadToken (Address: 0x18001bae8)
TerminateProcess (Address: 0x18001bad8)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x18001bb18)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18001bb28)

api-ms-win-core-psapi-l1-1-0.dll

K32EnumProcesses (Address: 0x18001bb38)
K32GetModuleFileNameExW (Address: 0x18001bb40)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18001bb98)
RegCreateKeyExW (Address: 0x18001bb70)
RegDeleteKeyExW (Address: 0x18001bb58)
RegDeleteValueW (Address: 0x18001bb60)
RegEnumKeyExW (Address: 0x18001bb68)
RegGetValueW (Address: 0x18001bb78)
RegOpenKeyExW (Address: 0x18001bb90)
RegQueryInfoKeyW (Address: 0x18001bb50)
RegQueryValueExW (Address: 0x18001bb88)
RegSetValueExW (Address: 0x18001bb80)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18001bbb8)
RtlLookupFunctionEntry (Address: 0x18001bba8)
RtlVirtualUnwind (Address: 0x18001bbb0)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathAppendW (Address: 0x18001bbc8)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

StrStrW (Address: 0x18001bbd8)

api-ms-win-core-string-l1-1-0.dll

GetStringTypeExW (Address: 0x18001bbe8)
MultiByteToWideChar (Address: 0x18001bbf0)

api-ms-win-core-string-l2-1-0.dll

CharNextW (Address: 0x18001bc00)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18001bc70)
AcquireSRWLockShared (Address: 0x18001bc10)
CreateEventW (Address: 0x18001bc78)
CreateMutexExW (Address: 0x18001bc60)
CreateSemaphoreExW (Address: 0x18001bc30)
DeleteCriticalSection (Address: 0x18001bc50)
EnterCriticalSection (Address: 0x18001bc38)
InitializeCriticalSection (Address: 0x18001bc80)
InitializeCriticalSectionAndSpinCount (Address: 0x18001bc90)
InitializeCriticalSectionEx (Address: 0x18001bc88)
LeaveCriticalSection (Address: 0x18001bc68)
OpenSemaphoreW (Address: 0x18001bc28)
ReleaseMutex (Address: 0x18001bc58)
ReleaseSemaphore (Address: 0x18001bc40)
ReleaseSRWLockExclusive (Address: 0x18001bc18)
ReleaseSRWLockShared (Address: 0x18001bca0)
SetEvent (Address: 0x18001bca8)
WaitForMultipleObjectsEx (Address: 0x18001bc20)
WaitForSingleObject (Address: 0x18001bc98)
WaitForSingleObjectEx (Address: 0x18001bc48)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x18001bcb8)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTime (Address: 0x18001bcd8)
GetSystemTimeAsFileTime (Address: 0x18001bcd0)
GetTickCount (Address: 0x18001bce0)
GetVersionExW (Address: 0x18001bcc8)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x18001bcf8)
CreateThreadpoolTimer (Address: 0x18001bd00)
SetThreadpoolTimer (Address: 0x18001bd08)
WaitForThreadpoolTimerCallbacks (Address: 0x18001bcf0)

api-ms-win-core-timezone-l1-1-0.dll

SystemTimeToFileTime (Address: 0x18001bd18)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x18001bd28)
GetTraceEnableLevel (Address: 0x18001bd40)
GetTraceLoggerHandle (Address: 0x18001bd48)
RegisterTraceGuidsW (Address: 0x18001bd38)
TraceEvent (Address: 0x18001bd50)
UnregisterTraceGuids (Address: 0x18001bd30)

api-ms-win-security-base-l1-1-0.dll

CopySid (Address: 0x18001bd80)
EqualSid (Address: 0x18001bd60)
GetLengthSid (Address: 0x18001bd78)
GetTokenInformation (Address: 0x18001bd70)
IsValidSid (Address: 0x18001bd68)
RevertToSelf (Address: 0x18001bd88)

KERNEL32.dll

lstrcmpiW (Address: 0x18001b8c0)

msvcrt.dll

__C_specific_handler (Address: 0x18001bda0)
__CxxFrameHandler3 (Address: 0x18001be70)
__dllonexit (Address: 0x18001be60)
_amsg_exit (Address: 0x18001bde0)
_callnewh (Address: 0x18001bdf0)
_errno (Address: 0x18001bdd0)
_initterm (Address: 0x18001bdd8)
_lock (Address: 0x18001bdc0)
_onexit (Address: 0x18001be18)
_purecall (Address: 0x18001be28)
_unlock (Address: 0x18001bdb8)
_vsnwprintf (Address: 0x18001be48)
_wcsdup (Address: 0x18001be58)
_wcsicmp (Address: 0x18001be00)
_wcsnicmp (Address: 0x18001bda8)
_XcptFilter (Address: 0x18001bde8)
?terminate@@YAXXZ (Address: 0x18001be78)
bsearch (Address: 0x18001be68)
free (Address: 0x18001be20)
malloc (Address: 0x18001be08)
memcmp (Address: 0x18001be80)
memcpy (Address: 0x18001be88)
memcpy_s (Address: 0x18001be40)
memmove (Address: 0x18001be90)
memmove_s (Address: 0x18001be10)
memset (Address: 0x18001bd98)
realloc (Address: 0x18001bdc8)
wcscat_s (Address: 0x18001be30)
wcschr (Address: 0x18001bdb0)
wcscmp (Address: 0x18001be98)
wcscpy_s (Address: 0x18001be38)
wcsncmp (Address: 0x18001be50)
wcsncpy_s (Address: 0x18001bdf8)