IEShims.dll
v11.0.19041.5794
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 10
AcRedirNotify
#1 · 0x29dc0
AcRedirNotifySetEnabled
#2 · 0x29e10
AcRedirSetEnabled
#3 · 0x29e30
IEShims_AdminCheckAndLaunch
#4 · 0x17240
IEShims_CreateWindowEx
#5 · 0x1a700
IEShims_GetOriginatingThreadId
#6 · 0x21e90
IEShims_InDllMainContext
#7 · 0x1ade0
IEShims_Initialize
#8 · 0x1ae00
IEShims_SetRedirectRegistryForThread
#9 · 0x1aec0
IEShims_Uninitialize
#10 · 0xe060
No function matches your filter.
Imported DLLs & functions 186
RegCloseKey
0x100481b8
RegCreateKeyExW
0x100481c8
RegEnumKeyExW
0x100481d4
RegEnumValueW
0x100481cc
RegGetValueW
0x100481c0
RegOpenKeyExW
0x100481b4
RegQueryInfoKeyW
0x100481d0
RegQueryValueExW
0x100481bc
RegSetValueExW
0x100481c4
PathFindFileNameW
0x10048200
PathGetArgsW
0x10048208
PathIsUNCW
0x100481e8
PathSkipRootW
0x100481e4
StrCmpCW
0x100481ec
StrCmpICA
0x100481f0
StrCmpICW
0x100481fc
StrCmpIW
0x10048204
StrCmpNCW
0x100481e0
StrCmpNIA
0x100481dc
StrCmpNICW
0x100481f8
StrDupW
0x100481f4
iertutil.dll
11
0x10048210
0x10048214
0x10048218
0x1004821c
0x10048220
0x10048224
0x10048228
0x1004822c
0x10048230
0x10048234
0x10048238
KERNEL32.dll
108
AcquireSRWLockExclusive
0x10048144
AcquireSRWLockShared
0x1004814c
CloseHandle
0x10048154
CloseThreadpoolTimer
0x10048168
CopyFileExW
0x10048078
CreateDirectoryW
0x10048088
CreateFileMappingW
0x10048020
CreateFileW
0x100480b0
CreateMutexExW
0x10048188
CreateMutexW
0x10048038
CreateSemaphoreExW
0x10048000
CreateThreadpoolTimer
0x10048184
DebugBreak
0x10048134
DecodePointer
0x100480b4
DelayLoadFailureHook
0x10048004
DeleteCriticalSection
0x10048178
DeleteProcThreadAttributeList
0x100481ac
DeviceIoControl
0x10048080
DuplicateHandle
0x10048074
EncodePointer
0x10048090
EnterCriticalSection
0x10048170
ExitThread
0x100480fc
ExpandEnvironmentStringsW
0x1004812c
FindClose
0x10048094
FindFirstFileW
0x1004809c
FindNextFileW
0x10048098
FormatMessageW
0x10048114
GetCurrentDirectoryW
0x100480d8
GetCurrentProcess
0x10048070
GetCurrentProcessId
0x100480ec
GetCurrentThreadId
0x100480b8
GetEnvironmentVariableW
0x10048128
GetFileAttributesW
0x100480c8
GetFileInformationByHandle
0x10048084
GetFileSizeEx
0x100480ac
GetFullPathNameW
0x10048124
GetLastError
0x100480f4
GetLogicalDriveStringsW
0x10048014
GetLongPathNameW
0x10048120
GetModuleFileNameA
0x10048130
GetModuleFileNameW
0x100480c0
GetModuleHandleA
0x10048068
GetModuleHandleExW
0x100480bc
GetModuleHandleW
0x10048138
GetProcAddress
0x100480e8
GetProcessHeap
0x1004810c
GetProcessId
0x100480f0
GetProcessIdOfThread
0x10048100
GetSystemDirectoryW
0x10048118
GetSystemTimeAsFileTime
0x10048048
GetThreadId
0x10048104
GetTickCount
0x10048044
GetTickCount64
0x10048030
GetWindowsDirectoryW
0x1004811c
HeapAlloc
0x10048108
HeapFree
0x10048110
InitializeCriticalSection
0x1004803c
InitializeCriticalSectionAndSpinCount
0x10048198
InitializeCriticalSectionEx
0x10048174
InitializeProcThreadAttributeList
0x100481a8
InitializeSRWLock
0x10048040
IsDebuggerPresent
0x1004813c
IsWow64Process
0x1004802c
LeaveCriticalSection
0x1004818c
LoadLibraryA
0x10048194
LocalAlloc
0x100480d0
LocalFree
0x100480dc
lstrcmpiW
0x1004808c
MapViewOfFile
0x1004801c
MultiByteToWideChar
0x100480e0
OpenEventW
0x100481a4
OpenFileMappingW
0x10048028
OpenProcess
0x10048034
OpenSemaphoreW
0x10048180
OutputDebugStringA
0x10048064
OutputDebugStringW
0x10048140
QueryDosDeviceW
0x10048018
QueryFullProcessImageNameW
0x10048010
QueryPerformanceCounter
0x1004804c
RaiseException
0x1004800c
RaiseFailFastException
0x100480a8
ReleaseMutex
0x1004815c
ReleaseSemaphore
0x10048158
ReleaseSRWLockExclusive
0x10048148
ReleaseSRWLockShared
0x10048150
ResolveDelayLoadedAPI
0x10048008
SearchPathW
0x100480c4
SetEnvironmentVariableW
0x1004806c
SetFileAttributesW
0x1004807c
SetLastError
0x100480cc
SetThreadpoolTimer
0x10048160
SetUnhandledExceptionFilter
0x10048058
Sleep
0x10048060
SleepConditionVariableSRW
0x10048050
TerminateProcess
0x10048190
TlsAlloc
0x100481a0
TlsFree
0x100480a0
TlsGetValue
0x1004819c
TlsSetValue
0x100480f8
UnhandledExceptionFilter
0x1004805c
UnmapViewOfFile
0x10048024
VirtualProtect
0x100480a4
VirtualQuery
0x100480d4
WaitForSingleObject
0x1004817c
WaitForSingleObjectEx
0x1004816c
WaitForThreadpoolTimerCallbacks
0x10048164
WakeAllConditionVariable
0x10048054
WideCharToMultiByte
0x100480e4
msvcrt.dll
44
__CxxFrameHandler3
0x100482e8
__dllonexit
0x100482d8
_amsg_exit
0x10048250
_CxxThrowException
0x10048268
_except_handler4_common
0x100482e0
_initterm
0x10048294
_lock
0x10048284
_onexit
0x100482dc
_stricmp
0x10048244
_unlock
0x100482d4
_vscwprintf
0x10048298
_vsnprintf_s
0x10048280
_vsnwprintf
0x10048288
_wcsicmp
0x10048270
_wcslwr
0x1004829c
_wcsnicmp
0x100482cc
_wfopen
0x10048254
_XcptFilter
0x1004824c
??0exception@@QAE@ABV0@@Z
0x10048274
??0exception@@QAE@XZ
0x1004827c
??1exception@@UAE@XZ
0x10048278
??1type_info@@UAE@XZ
0x10048260
?terminate@@YAXXZ
0x10048258
calloc
0x10048248
fclose
0x10048240
fputws
0x1004825c
free
0x100482c0
iswctype
0x100482b0
iswspace
0x100482c8
malloc
0x100482d0
memcmp
0x10048264
memcpy_s
0x100482b8
memmove
0x100482e4
memmove_s
0x100482a8
memset
0x100482ec
realloc
0x100482bc
towlower
0x100482ac
wcschr
0x100482a4
wcsncmp
0x1004826c
wcspbrk
0x100482a0
wcsrchr
0x10048290
wcsspn
0x100482b4
wcsstr
0x1004828c
wcstok_s
0x100482c4
No function matches your filter.