Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.0.6000.16386 (vista_rtm.061101-2205) 33.33%
6.0.6000.16386 (vista_rtm.061101-2205) 33.33%
6.0.6000.16386 (vista_rtm.061101-2205) 33.33%
(Note, Microsoft publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Child process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
CheckTokenMembership, AllocateAndInitializeSid, RegCloseKey, RegDeleteKeyW, RegOpenKeyExW, ConvertStringSecurityDescriptorToSecurityDescriptorW, RegDeleteValueW, RegSetValueExW, RegCreateKeyExW, GetTokenInformation, OpenProcessToken, RegGetValueW, OpenThreadToken, EqualSid, GetKernelObjectSecurity, GetSecurityDescriptorSacl, GetAce, CopySid, IsValidSid, InitializeAcl, GetSidSubAuthorityCount, GetSidSubAuthority, RegQueryInfoKeyW, RegEnumKeyW, ConvertStringSidToSidW, GetLengthSid, RegQueryValueW, RegQueryValueExW, SetSecurityInfo, RegCreateKeyW
crypt32.dll
CertGetCertificateContextProperty, CertGetNameStringW, CryptDecodeObject, CertFindCertificateInStore, CertFreeCertificateContext, CertCloseStore, CertOpenStore, CertControlStore
gdi32.dll
GetTextExtentPoint32W, GetStockObject, SetTextColor, SelectObject, SetBkMode, GetDeviceCaps, CreateFontIndirectW, GetObjectW, DeleteObject
kernel32.dll
SetProcessShutdownParameters, WaitForSingleObjectEx, RegisterApplicationRestart, ReleaseMutex, CreateMutexW, InterlockedExchange, ResetEvent, IsWow64Process, Wow64DisableWow64FsRedirection, Wow64RevertWow64FsRedirection, WinExec, CreateProcessW, OpenProcess, GetLongPathNameW, GetFileAttributesW, GetCurrentProcessId, GetCurrentThread, InterlockedCompareExchange, WideCharToMultiByte, MultiByteToWideChar, CreateFileW, GetModuleFileNameW, DeactivateActCtx, ActivateActCtx, ReleaseActCtx, CreateActCtxW, CompareStringW, lstrcmpA, CreateFileMappingW, MapViewOfFile, UnmapViewOfFile, LocalAlloc, DuplicateHandle, SetLastError, MulDiv, lstrlenW, GetWindowsDirectoryW, ExpandEnvironmentStringsW, LeaveCriticalSection, EnterCriticalSection, HeapFree, GetProcessHeap, HeapAlloc, GetModuleHandleW, GetCurrentProcess, LocalFree, LoadLibraryW, GetProcAddress, FreeLibrary, SetEvent, HeapSetInformation, CreateEventW, GetLastError, InterlockedIncrement, InterlockedDecrement, CreateThread, CloseHandle, WaitForSingleObject, SearchPathW, Sleep, GetStartupInfoW, SetUnhandledExceptionFilter, GetModuleHandleA, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetSystemTimeAsFileTime, TerminateProcess, UnhandledExceptionFilter, InitializeCriticalSection, DeleteCriticalSection
msimg32.dll
GradientFill
msvcrt.dll
DllMain
ole32.dll
CoRevokeClassObject, CoRegisterClassObject, CoCreateGuid, StringFromCLSID, CoTaskMemFree, CoCreateInstance, CoCreateInstanceEx, CoGetClassObject, CoAllowSetForegroundWindow, CoImpersonateClient, CoRevertToSelf, StringFromGUID2, CoInitializeEx, CoInitializeSecurity, CoUninitialize
psapi.dll
EnumProcessModules, GetModuleFileNameExW, GetModuleBaseNameW, EnumProcesses
shell32.dll
SHGetFolderPathW
user32.dll
PeekMessageW, DispatchMessageW, TranslateMessage, MsgWaitForMultipleObjects, PostQuitMessage, CreateWindowExW, RegisterClassW, LoadCursorW, AllowSetForegroundWindow, GetShellWindow, DialogBoxParamW, GetClientRect, SendDlgItemMessageW, MonitorFromWindow, GetMonitorInfoW, ShowWindow, SetWindowPos, GetThreadDesktop, GetUserObjectInformationW, SetForegroundWindow, GetWindowLongW, SetWindowLongW, CheckDlgButton, EndDialog, BeginPaint, DefWindowProcW, MapWindowPoints, GetWindowRect, GetDlgItem, EnableWindow, GetWindowThreadProcessId, SetWindowTextW, SendMessageW, SetDlgItemTextW, LoadStringW, GetWindow, IsWindowVisible, GetTopWindow, GetDesktopWindow, InvalidateRect, DestroyWindow, GetParent, ReleaseDC, DestroyIcon, DrawIconEx, LoadImageW, DrawTextW, GetSysColor, SystemParametersInfoW, GetDC, EndPaint
version.dll
GetFileVersionInfoW, GetFileVersionInfoSizeW, VerQueryValueW
wintrust.dll
WinVerifyTrust, WTHelperGetProvSignerFromChain, WTHelperProvDataFromStateData, CryptCATAdminCalcHashFromFileHandle, CryptCATAdminReleaseCatalogContext, CryptCATCatalogInfoFromContext, CryptCATAdminEnumCatalogFromHash, CryptCATAdminReleaseContext, CryptCATAdminAcquireContext

ieuser.exe

Internet Explorer by Microsoft

Remove ieuser.exe
Version:   6.0.6000.16386 (vista_rtm.061101-2205)
MD5:   a8986e339a9215b9410484814224531e
SHA1:   969d7acfd91f74dbc6f603e09e2e56400f5c1289
SHA256:   ea74f045308e45e179eb7872fd9ea0bdd2d961b718896b0440822032846854e6
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is ieuser.exe?

During the life cycle of Internet Explorer's startup, it launch the ieuser.exe process, which sets the security settings for Internet Explorer to the medium level. When Internet Explorer requires administrative privileges (such as to install an ActiveX control), Internet Explorer will elevate the process or use an alternative installer process which runs at higher security level.

About ieuser.exe (from Microsoft)

Internet Explorer harnesses the untapped power of your PC, delivering pages full of vivid graphics, smoother video, and interactive content. Experience the web the way you want to with a cleaner look

DetailsDetails

File name:ieuser.exe
Publisher:Microsoft Corporation
Product name:Internet Explorer
Description:Microsoft® Windows® Operating System
Typical file path:C:\Program Files\internet explorer\ieuser.exe
Original name:ieuser.exe.mui
File version:6.0.6000.16386 (vista_rtm.061101-2205)
Product version:6.0.6000.16386
Size:292.5 KB (299,520 bytes)
Digital DNA
PE subsystem:Windows GUI
Entropy:7.087579
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Microsoft Corporation
1% remove
Internet Explorer 7 has been designed to make everyday tasks easier, provide dynamic security protection and improve the development platform and manageability. End user improvements include a streamlined interface, tabbed browsing, printing advances, improved search functionality, instant feeds (RSS), dynamic security protection, and more.
Microsoft Corporation
5% remove
Windows IE8 (Internet Explorer 8) is a web browser from Microsoft. IE8 contains many new features, including WebSlices and Accelerators (Accelerators are a form of selection-based search which allow a user to invoke an online service from any other page using only the mouse). The address bar features domain highlighting for added security so that the top-level domain is shown in black whereas the other parts of the URL are grayed out. I...

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.13693432%
0.028634%
Kernel CPU:0.11136225%
0.013761%
User CPU:0.02557207%
0.014873%
Kernel CPU time:406 ms/min
100,923,805ms/min
User CPU time:19 ms/min
0 ms/min
Memory
Private memory:3.72 MB
21.59 MB
Private (maximum):5.99 MB
Private (minimum):3.81 MB
Non-paged memory:3.72 MB
21.59 MB
Virtual memory:74.72 MB
140.96 MB
Virtual memory (peak):76.5 MB
169.69 MB
Working set:3.79 MB
18.61 MB
Working set (peak):7.72 MB
37.95 MB
Page faults:2,731/min
2,039/min
I/O
I/O read transfer:10.63 KB/sec
1.02 MB/min
I/O read operations:128/sec
343/min
I/O write transfer:228 Bytes/sec
274.99 KB/min
I/O write operations:3/sec
227/min
I/O other transfer:144.68 KB/sec
448.09 KB/min
I/O other operations:915/sec
1,671/min
Resource allocations
Threads:5
12
Handles:240
600
GUI GDI count:10
103
GUI USER count:7
49

BehaviorsProcess properties

Platform:32-bit
Command line:"C:\Program Files\internet explorer\ieuser.exe" -embedding
Owner:User

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows Vista Home Premium 33.33%
Windows Vista Ultimate 33.33%
Windows Vista Home Basic 33.33%

Distribution by countryDistribution by country

United States installs about 100.00% of Internet Explorer.
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE