» ieshims.dll
Overview
Analysis
File Details
Downloads (17)

ieshims.dll

Windows Internet Explorer

Microsoft Corporation

It is installed as part of Windows 8. The file has been seen being downloaded from www.dutoangxd.vn and multiple other hosts.

File name:

ieshims.dll

Publisher:

Microsoft Corporation

Product:

Windows® Internet Explorer

Description:

Internet Explorer Compatibility Shims

Part of the Windows 8 Operating System

Version:

10.00.9200.16384 (win8_rtm.120725-1247)

MD5:

ad3d24c56d46e6aab9d43eaab60f2ca4

SHA-1:

77aeae002dac78617bbed22ace2123b587f378cb

SHA-256:

57bba9fa4cb3ae173a725e63af676da9af237474a3870016bdb9bda64ff95409

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)
Whitelisted (by digital signature)

Analysis date:

11/15/2024 12:45:07 PM UTC (today)

File size:

345.5 KB (353,792 bytes)

Product version:

10.00.9200.16384

Original file name:

ieshims.dll

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\Program Files\internet explorer\ieshims.dll

File PE Metadata

Compilation timestamp:

7/26/2012 1:28:47 AM

OS version:

6.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

10.10

CTPH (ssdeep):

3072:Ji0mxeZenEE3YWAObNq05UJu+NpaO+5+dAFmru+pA0As99hGMniWPZsUGEXkLhn5:UNz9I2b35UJuKps5l4A0IE/JSJ/KpG

Entry address:

0x12F8

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 0F, 84, D5, 3D, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, EB, 07, CC, 90, 90, 90, 90, 90, 90, 4C, 89, 44, 24, 18, 89, 54, 24, 10, 48, 89, 4C, 24, 08, 53, 56, 57, 48, 81, EC, 40, 01, 00, 00, 8B, FA, 48, 8B, F1, BB, 01, 00, 00, 00, 89, 5C, 24, 20, 89, 15, F4, ED, 04, 00, 85, D2, 75, 13, 39, 15, FA, ED, 04, 00, 75, 0B, 33, DB, 89, 5C, 24, 20, E9, 97... 
[+]

Entropy:

5.9600

Code size:

313.5 KB (321,024 bytes)

The file ieshims.dll has been seen being distributed by the following 17 URLs.

http://www.dutoangxd.vn/dulieu/khoacung/.../IEShims.dll

http://www.dutoangxd.vn/dulieu/khoamem/.../IEShims.dll

http://www.dutoangxd.vn/dulieu/khoacung/.../IEShims.dll

http://www.dutoangxd.vn/dulieu/khoamem/.../IEShims.dll

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.