ieshims.dll
v8.0.7600.16385
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 8
AcRedirNotify
#1 · 0x21500
AcRedirNotifySetEnabled
#2 · 0x21578
AcRedirSetEnabled
#3 · 0x21588
IEShims_GetOriginatingThreadId
#4 · 0x140cc
IEShims_InDllMainContext
#5 · 0xff08
IEShims_Initialize
#6 · 0xfdac
IEShims_SetRedirectRegistryForThread
#7 · 0xfe6c
IEShims_Uninitialize
#8 · 0xfe60
No function matches your filter.
Imported DLLs & functions 163
ADVAPI32.dll
10
DecryptFileW
0x7ff34441040
EncryptFileW
0x7ff34441038
RegCloseKey
0x7ff34441048
RegCreateKeyExW
0x7ff34441010
RegEnumKeyW
0x7ff34441028
RegEnumValueW
0x7ff34441018
RegOpenKeyExW
0x7ff34441008
RegQueryInfoKeyW
0x7ff34441020
RegQueryValueExW
0x7ff34441000
RegSetValueExW
0x7ff34441030
KERNEL32.dll
79
CloseHandle
0x7ff344412b0
CopyFileW
0x7ff34441108
CreateDirectoryW
0x7ff34441110
CreateFileMappingW
0x7ff34441160
CreateFileW
0x7ff344412c8
CreateMutexW
0x7ff34441058
DecodePointer
0x7ff34441180
DeleteCriticalSection
0x7ff34441288
DeleteProcThreadAttributeList
0x7ff344412b8
DeviceIoControl
0x7ff344410f8
DuplicateHandle
0x7ff344410d0
EncodePointer
0x7ff34441138
EnterCriticalSection
0x7ff34441128
ExpandEnvironmentStringsW
0x7ff34441258
FindClose
0x7ff34441120
FindFirstFileW
0x7ff34441130
FindNextFileW
0x7ff34441118
FreeLibrary
0x7ff344411c8
GetCurrentDirectoryW
0x7ff344411e8
GetCurrentProcess
0x7ff344410d8
GetCurrentProcessId
0x7ff34441210
GetCurrentThreadId
0x7ff34441190
GetEnvironmentVariableW
0x7ff34441220
GetFileAttributesW
0x7ff344411a0
GetFileInformationByHandle
0x7ff344410e8
GetFileSizeEx
0x7ff34441188
GetFullPathNameW
0x7ff34441218
GetLastError
0x7ff34441200
GetLogicalDriveStringsW
0x7ff34441168
GetLongPathNameW
0x7ff34441248
GetModuleFileNameW
0x7ff344411a8
GetModuleHandleA
0x7ff344410c0
GetModuleHandleExW
0x7ff34441260
GetModuleHandleW
0x7ff344411d0
GetProcAddress
0x7ff344411f0
GetProcessHeap
0x7ff34441238
GetProcessId
0x7ff34441208
GetSystemDirectoryW
0x7ff34441240
GetSystemTimeAsFileTime
0x7ff34441088
GetTickCount
0x7ff34441090
GetWindowsDirectoryW
0x7ff34441250
HeapAlloc
0x7ff34441228
HeapFree
0x7ff34441230
InitializeCriticalSection
0x7ff34441098
InitializeCriticalSectionAndSpinCount
0x7ff34441278
InitializeProcThreadAttributeList
0x7ff34441178
LeaveCriticalSection
0x7ff34441280
LoadLibraryW
0x7ff34441140
LocalAlloc
0x7ff344411b8
LocalFree
0x7ff344411f8
lstrcmpiW
0x7ff344410f0
lstrlenW
0x7ff34441100
MapViewOfFile
0x7ff34441150
MultiByteToWideChar
0x7ff344411e0
OpenEventW
0x7ff344412a8
OpenProcess
0x7ff34441068
OutputDebugStringA
0x7ff344410b0
OutputDebugStringW
0x7ff344410a8
QueryDosDeviceW
0x7ff34441070
QueryPerformanceCounter
0x7ff34441170
ReleaseMutex
0x7ff34441148
SearchPathW
0x7ff34441198
SetEnvironmentVariableW
0x7ff344410c8
SetFileAttributesW
0x7ff344410e0
SetLastError
0x7ff344411b0
SetUnhandledExceptionFilter
0x7ff34441078
Sleep
0x7ff344410a0
TerminateProcess
0x7ff344412c0
TlsAlloc
0x7ff34441290
TlsFree
0x7ff34441298
TlsGetValue
0x7ff34441268
TlsSetValue
0x7ff34441270
UnhandledExceptionFilter
0x7ff34441080
UnmapViewOfFile
0x7ff34441158
VirtualProtect
0x7ff344410b8
VirtualQuery
0x7ff344411c0
WaitForSingleObject
0x7ff34441060
WaitForSingleObjectEx
0x7ff344412a0
WideCharToMultiByte
0x7ff344411d8
msvcrt.dll
37
__C_specific_handler
0x7ff34441468
__CxxFrameHandler3
0x7ff344414b0
__dllonexit
0x7ff34441488
_amsg_exit
0x7ff34441460
_CxxThrowException
0x7ff344414f8
_initterm
0x7ff34441458
_lock
0x7ff34441490
_onexit
0x7ff34441498
_unlock
0x7ff34441480
_vscwprintf
0x7ff34441408
_vsnwprintf
0x7ff344413e0
_wcsicmp
0x7ff344414d0
_wcslwr
0x7ff344413f8
_wcsnicmp
0x7ff344414e8
_wfopen
0x7ff34441438
_XcptFilter
0x7ff34441450
??1type_info@@UEAA@XZ
0x7ff34441470
?terminate@@YAXXZ
0x7ff34441478
calloc
0x7ff34441430
fclose
0x7ff34441448
fputws
0x7ff34441440
free
0x7ff344413d8
iswctype
0x7ff344414c0
iswspace
0x7ff344414d8
malloc
0x7ff344414e0
memcpy
0x7ff344414a8
memmove
0x7ff34441400
memset
0x7ff344414a0
realloc
0x7ff34441418
towlower
0x7ff344414c8
wcschr
0x7ff34441410
wcsncmp
0x7ff34441428
wcspbrk
0x7ff344414f0
wcsrchr
0x7ff344413f0
wcsspn
0x7ff34441420
wcsstr
0x7ff344413e8
wcstok
0x7ff344414b8
NtQueryObject
0x7ff34441528
RtlCaptureContext
0x7ff34441508
RtlLookupFunctionEntry
0x7ff34441510
RtlNtStatusToDosError
0x7ff34441520
RtlVirtualUnwind
0x7ff34441518
CoInitialize
0x7ff34441558
CoTaskMemAlloc
0x7ff34441548
CoTaskMemFree
0x7ff34441540
CoUninitialize
0x7ff34441550
StringFromGUID2
0x7ff34441538
SHLWAPI.dll
12
0x7ff34441350
0x7ff34441348
0x7ff34441340
0x7ff34441338
0x7ff34441330
0x7ff34441318
PathFindFileNameW
0x7ff34441320
PathGetArgsW
0x7ff34441360
PathIsUNCW
0x7ff34441328
PathSkipRootW
0x7ff34441358
SHRegGetValueW
0x7ff34441310
StrDupW
0x7ff34441308
AllowSetForegroundWindow
0x7ff34441390
GetClassNameW
0x7ff34441388
GetForegroundWindow
0x7ff34441378
GetGUIThreadInfo
0x7ff34441380
GetPropW
0x7ff34441398
GetWindowThreadProcessId
0x7ff34441370
No function matches your filter.