Should I block it?

No, this file is 100% safe to run.

Additional versions

9.00.8112.16443 (WIN7_IE9_GDR.120227-1545)	0.46%
9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)	45.41%
8.00.7600.16385 (win7_rtm.090713-1255)	6.42%
10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)	25.69%
10.00.9200.16438 (win8_gdr_soc_ie_beta.121108-2200)	0.92%
10.00.9200.16384 (win8_rtm.120725-1247)	21.10%

Relationships

Parent processes

idman.exe (Internet Download Manager (IDM) by Tonec Inc.)

Related files

PE file structure

Show functions

Import table

advapi32.dll

GetTraceEnableFlags, GetTraceLoggerHandle, TraceEvent, UnregisterTraceGuids, GetTraceEnableLevel, RegisterTraceGuidsW

kernel32.dll

WaitForSingleObject, GetModuleHandleW, LoadLibraryW, GetCurrentProcess, HeapSetInformation, CreateThread, FreeLibrary, CloseHandle, SetProcessShutdownParameters, CreateEventW, InterlockedExchange, GetProcAddress, RegisterApplicationRestart, GetProcessHeap, GetModuleFileNameW, DeactivateActCtx, ActivateActCtx, ReleaseActCtx, CreateActCtxW, UnhandledExceptionFilter, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, GetModuleHandleA, SetUnhandledExceptionFilter, GetStartupInfoW, InterlockedCompareExchange, Sleep, SetEvent, HeapFree, HeapAlloc, GetCurrentProcessId, GetLastError, InterlockedDecrement, InterlockedIncrement, SetProcessDEPPolicy, IsWow64Process, GetVersionExA, LoadLibraryExW, VirtualAlloc

msvcrt.dll

DllMain

ole32.dll

CoInitializeSecurity, CoUninitialize, CoRegisterClassObject, CoRevokeClassObject, CoInitializeEx, CLSIDFromString, CoCreateInstance

user32.dll

MsgWaitForMultipleObjects, PostQuitMessage, GetThreadDesktop, GetUserObjectInformationW, LoadCursorW, TranslateMessage, RegisterClassW, CreateWindowExW, DispatchMessageW, DefWindowProcW, PeekMessageW

wininet.dll

InternetGetCookieExW, InternetSetCookieExW

ielowutil.exe

Windows Internet Explorer by Microsoft

Remove ielowutil.exe

Version:	10.00.9200.16384 (win8_rtm.120725-1247)
MD5:	cf0b46a34780c3b4e3af1297217a80bd
SHA1:	9a025abd62b2daedc535d9f239ec86fb141c616c
SHA256:	5c9d9b92b84b0dddc567c80f1effe491956c15e3106fa343a4d5909aae24db73

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is ielowutil.exe?

Internet Low-Mic Utility Tool (IELowUtil.exe) is the broker process that handles operations which require processing at a Low Integrity level.

About ielowutil.exe (from Microsoft)

“Protected Mode IE separates the temporary/persistent data that IE saves from regular LUA (Limited User Account) IE and elevated IE. This is to prevent cross IE injection paths, keeping users secure. H”

Overview

ielowutil.exe executes as a process with the local user's privileges typically within the context of its parent idman.exe (Internet Download Manager (IDM) by Tonec Inc.). It is installed with a couple of know programs including Internet Explorer Toolbar 4.6 by SweetPacks published by SweetIM Technologies Ltd., Windows Internet Explorer 8 from Microsoft Corporation and Windows Internet Explorer 8 by Microsoft Corporation. This version is installed on Windows 8 and is compiled as a 64 bit program.

Details

File name:	ielowutil.exe
Publisher:	Microsoft Corporation
Product name:	Windows® Internet Explorer
Description:	Internet Low-Mic Utility Tool
Typical file path:	C:\Program Files\internet explorer\ielowutil.exe
Original name:	ielowutil.exe.mui
File version:	10.00.9200.16384 (win8_rtm.120725-1247)
Product version:	10.00.9200.16384
Size:	217 KB (222,208 bytes)
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No

More details

Programs

The following programs will install this file

Windows Internet Explorer 8

Microsoft Corporation

5% remove

Windows IE8 (Internet Explorer 8) is a web browser from Microsoft. IE8 contains many new features, including WebSlices and Accelerators (Accelerators are a form of selection-based search which allow a user to invoke an online service from any other page using only the mouse). The address bar features domain highlighting for added security so that the top-level domain is shown in black whereas the other parts of the URL are grayed out. I...

Internet Explorer

Microsoft Corporation

5% remove

Internet Explorer Toolbar by SweetPacks

SweetIM Technologies Ltd.

63% remove

SweetIM toolbar is a browser add-on which adds various shortcuts such as games,deal pages etc. to your browsers for easy access. This toolbar also changes your homepage to home.sweetim.com While some people may find SweetIM toolbar useful, this browser add-on can be categorized as an unwanted application. The homepage that is set to default by this toolbar is enhanced by deceptive ads which redirects PC users to survey pages. The toolba...

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.01626906%	0.028634%
Kernel CPU:	0.00668681%	0.013761%
User CPU:	0.00958226%	0.014873%
Kernel CPU time:	6,847 ms/min	100,923,805ms/min
CPU cycles:	4,498/sec	17,470,203/sec
Context switches:	308/sec	284/sec
Memory
Private memory:	3.03 MB	21.59 MB
Private (maximum):	4.1 MB
Private (minimum):	1.1 MB
Non-paged memory:	3.03 MB	21.59 MB
Virtual memory:	67.13 MB	140.96 MB
Virtual memory (peak):	69.4 MB	169.69 MB
Working set:	1.51 MB	18.61 MB
Working set (peak):	5.66 MB	37.95 MB
Page faults:	5,167/min	2,039/min
I/O
I/O other transfer:	2 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	27	12
Handles:	89	600
GUI GDI count:	9	103
GUI GDI peak:	10	142
GUI USER count:	3	49
GUI USER peak:	3	71

Process properties

Integrety level:	Low
Platform:	64-bit
Command line:	"C:\Program Files\internet explorer\ielowutil.exe" -embedding
Owner:	User
Parent process:	idman.exe (Internet Download Manager (IDM) by Tonec Inc.)

Threads