home

Flash.ocx

Shockwave Flash

Microsoft Corporation

The Adobe Flash Player for Internet Explorer allows IE to render Flash objects. While this ActiveX controls is developed and published by Adobe, Microsoft authenticode signs the library.
Publisher:
Adobe Systems, Inc.  (signed by Microsoft Corporation)

Product:
Shockwave Flash

Description:
Adobe Flash Player 13.0 r0

Version:
13,0,0,182

MD5:
7f981ea482f865c35cd29de6b24e5f09

SHA-1:
7e0cb2999fa25c2605df6a3cc8426e4c037e65e1

SHA-256:
f70f3d00bbb2e380f230ad21cafe8c233d9277a998d28e4ab2c282e8c0735d56

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/19/2024 4:02:28 AM UTC  (today)

File size:
14.9 MB (15,664,088 bytes)

Product version:
13,0,0,182

Copyright:
Adobe® Flash® Player. Copyright © 1996 Adobe Systems Incorporated. All Rights Reserved. Adobe and Flash are either trademarks or registered trademarks

Trademarks:
Adobe Flash Player

Original file name:
Flash.ocx

File type:
OLE control extension (Win64 OCX)

Language:
English (United States)

Common path:
C:\Windows\System32\macromed\flash\flash.ocx

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
6/17/2013 5:26:18 PM

Valid to:
9/17/2014 5:26:18 PM

Subject:
CN=Microsoft Windows 3rd party Component, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Windows Third Party Component CA 2012, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000000B8B9486A892605C5700000000000B

Registration
CLSIDs:
{D27CDB6E-AE6D-11cf-96B8-444553540000}, {D27CDB70-AE6D-11cf-96B8-444553540000}

ProgIDs:
ShockwaveFlash.ShockwaveFlash.11, FlashFactory.FlashFactory.1

COM registered:
Yes

File PE Metadata
Compilation timestamp:
3/26/2014 10:47:53 PM

OS version:
6.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
393216:Jn6v+1cVHvVjog6WZVoCDnFTn1oxErlvYMhcQuvWu:m06ZrWWu

Entry address:
0x9DD7E8

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, EF, 08, 01, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 03, 00, 00, 00, CC, CC, CC, 48, 8B, C4, 48, 89, 58, 20, 4C, 89, 40, 18, 89, 50, 10, 48, 89, 48, 08, 56, 57, 41, 56, 48, 83, EC, 50, 49, 8B, F0, 8B, DA, 4C, 8B, F1, BA, 01, 00, 00, 00, 89, 50, B8, 85, DB, 75, 0F, 39, 1D, EC, AF, 4D, 00, 75, 07, 33, C0, E9, D2, 00, 00, 00, 8D, 43, FF...
 
[+]

Entropy:
6.5670

Code size:
10.8 MB (11,312,128 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.