IEShims.dll
v11.0.19041.5794
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 10
AcRedirNotify
#1 · 0x348c0
AcRedirNotifySetEnabled
#2 · 0x34950
AcRedirSetEnabled
#3 · 0x34960
IEShims_AdminCheckAndLaunch
#4 · 0x234c0
IEShims_CreateWindowEx
#5 · 0x254b0
IEShims_GetOriginatingThreadId
#6 · 0x2aad0
IEShims_InDllMainContext
#7 · 0x25600
IEShims_Initialize
#8 · 0x9830
IEShims_SetRedirectRegistryForThread
#9 · 0x6120
IEShims_Uninitialize
#10 · 0x16230
No function matches your filter.
Imported DLLs & functions 190
RegCloseKey
0x18004af68
RegCreateKeyExW
0x18004af88
RegEnumKeyExW
0x18004af98
RegEnumValueW
0x18004afa0
RegGetValueW
0x18004af78
RegOpenKeyExW
0x18004af60
RegQueryInfoKeyW
0x18004af90
RegQueryValueExW
0x18004af70
RegSetValueExW
0x18004af80
PathFindFileNameW
0x18004b000
PathGetArgsW
0x18004aff8
PathIsUNCW
0x18004afc8
PathSkipRootW
0x18004afc0
StrCmpCW
0x18004afd8
StrCmpICA
0x18004afe0
StrCmpICW
0x18004afd0
StrCmpIW
0x18004b008
StrCmpNCW
0x18004afb8
StrCmpNIA
0x18004afb0
StrCmpNICW
0x18004aff0
StrDupW
0x18004afe8
iertutil.dll
11
0x18004b068
0x18004b048
0x18004b040
0x18004b060
0x18004b018
0x18004b058
0x18004b020
0x18004b038
0x18004b028
0x18004b050
0x18004b030
KERNEL32.dll
111
AcquireSRWLockExclusive
0x18004ae60
AcquireSRWLockShared
0x18004ae70
CloseHandle
0x18004ae80
CloseThreadpoolTimer
0x18004aea8
CopyFileExW
0x18004ace8
CreateDirectoryW
0x18004ad08
CreateFileMappingW
0x18004ac20
CreateFileW
0x18004af48
CreateMutexExW
0x18004aee8
CreateMutexW
0x18004ac50
CreateSemaphoreExW
0x18004aef8
CreateThreadpoolTimer
0x18004aee0
DebugBreak
0x18004ae40
DecodePointer
0x18004af40
DelayLoadFailureHook
0x18004abe8
DeleteCriticalSection
0x18004aec8
DeleteProcThreadAttributeList
0x18004af30
DeviceIoControl
0x18004acf8
DuplicateHandle
0x18004ace0
EncodePointer
0x18004ad18
EnterCriticalSection
0x18004aeb8
ExitThread
0x18004add0
ExpandEnvironmentStringsW
0x18004ae30
FindClose
0x18004ad20
FindFirstFileW
0x18004ad30
FindNextFileW
0x18004ad28
FormatMessageW
0x18004ae00
GetCurrentDirectoryW
0x18004ad88
GetCurrentProcess
0x18004acd8
GetCurrentProcessId
0x18004adb0
GetCurrentThreadId
0x18004ad48
GetEnvironmentVariableW
0x18004ae28
GetFileAttributesW
0x18004ad68
GetFileInformationByHandle
0x18004ad00
GetFileSizeEx
0x18004af50
GetFullPathNameW
0x18004ae20
GetLastError
0x18004adc0
GetLogicalDriveStringsW
0x18004ac08
GetLongPathNameW
0x18004ae18
GetModuleFileNameA
0x18004ae38
GetModuleFileNameW
0x18004ad58
GetModuleHandleA
0x18004acc8
GetModuleHandleExW
0x18004ad50
GetModuleHandleW
0x18004ae48
GetProcAddress
0x18004ada8
GetProcessHeap
0x18004adf0
GetProcessId
0x18004adb8
GetProcessIdOfThread
0x18004add8
GetSystemDirectoryW
0x18004ae08
GetSystemTimeAsFileTime
0x18004ac70
GetThreadId
0x18004ade0
GetTickCount
0x18004ac68
GetTickCount64
0x18004ac40
GetWindowsDirectoryW
0x18004ae10
HeapAlloc
0x18004ade8
HeapFree
0x18004adf8
InitializeCriticalSection
0x18004ac58
InitializeCriticalSectionAndSpinCount
0x18004abe0
InitializeCriticalSectionEx
0x18004aec0
InitializeProcThreadAttributeList
0x18004af28
InitializeSRWLock
0x18004ac60
IsDebuggerPresent
0x18004ae50
IsWow64Process
0x18004ac38
LeaveCriticalSection
0x18004aef0
LoadLibraryA
0x18004af00
LocalAlloc
0x18004ad78
LocalFree
0x18004ad90
lstrcmpiW
0x18004ad10
MapViewOfFile
0x18004ac18
MultiByteToWideChar
0x18004ad98
OpenEventW
0x18004af20
OpenFileMappingW
0x18004ac30
OpenProcess
0x18004ac48
OpenSemaphoreW
0x18004aed8
OutputDebugStringA
0x18004acc0
OutputDebugStringW
0x18004ae58
QueryDosDeviceW
0x18004ac10
QueryFullProcessImageNameW
0x18004ac00
QueryPerformanceCounter
0x18004ac78
RaiseException
0x18004abf8
RaiseFailFastException
0x18004af08
ReleaseMutex
0x18004ae90
ReleaseSemaphore
0x18004ae88
ReleaseSRWLockExclusive
0x18004ae68
ReleaseSRWLockShared
0x18004ae78
ResolveDelayLoadedAPI
0x18004abf0
RtlCaptureContext
0x18004acb0
RtlLookupFunctionEntry
0x18004aca8
RtlVirtualUnwind
0x18004aca0
SearchPathW
0x18004ad60
SetEnvironmentVariableW
0x18004acd0
SetFileAttributesW
0x18004acf0
SetLastError
0x18004ad70
SetThreadpoolTimer
0x18004ae98
SetUnhandledExceptionFilter
0x18004ac90
Sleep
0x18004acb8
SleepConditionVariableSRW
0x18004ac80
TerminateProcess
0x18004af38
TlsAlloc
0x18004af18
TlsFree
0x18004ad38
TlsGetValue
0x18004af10
TlsSetValue
0x18004adc8
UnhandledExceptionFilter
0x18004ac98
UnmapViewOfFile
0x18004ac28
VirtualProtect
0x18004ad40
VirtualQuery
0x18004ad80
WaitForSingleObject
0x18004aed0
WaitForSingleObjectEx
0x18004aeb0
WaitForThreadpoolTimerCallbacks
0x18004aea0
WakeAllConditionVariable
0x18004ac88
WideCharToMultiByte
0x18004ada0
msvcrt.dll
45
__C_specific_handler
0x18004b080
__CxxFrameHandler3
0x18004b1d0
__dllonexit
0x18004b1b8
_amsg_exit
0x18004b098
_CxxThrowException
0x18004b0c8
_initterm
0x18004b120
_lock
0x18004b1a8
_onexit
0x18004b1c0
_stricmp
0x18004b078
_unlock
0x18004b1b0
_vscwprintf
0x18004b108
_vsnprintf_s
0x18004b100
_vsnwprintf
0x18004b110
_wcsicmp
0x18004b0e0
_wcslwr
0x18004b130
_wcsnicmp
0x18004b190
_wfopen
0x18004b0a8
_XcptFilter
0x18004b090
??0exception@@QEAA@AEBV0@@Z
0x18004b0e8
??0exception@@QEAA@XZ
0x18004b0f8
??1exception@@UEAA@XZ
0x18004b0f0
??1type_info@@UEAA@XZ
0x18004b1a0
?terminate@@YAXXZ
0x18004b0b0
calloc
0x18004b088
fclose
0x18004b0a0
fputws
0x18004b0d0
free
0x18004b178
iswctype
0x18004b158
iswspace
0x18004b188
malloc
0x18004b198
memcmp
0x18004b0c0
memcpy_s
0x18004b168
memmove
0x18004b0b8
memmove_s
0x18004b148
memset
0x18004b1c8
realloc
0x18004b170
towlower
0x18004b150
wcschr
0x18004b140
wcscmp
0x18004b1d8
wcsncmp
0x18004b0d8
wcspbrk
0x18004b138
wcsrchr
0x18004b118
wcsspn
0x18004b160
wcsstr
0x18004b128
wcstok_s
0x18004b180
No function matches your filter.