» Flash.ocx
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

Flash.ocx

Shockwave Flash

Microsoft Corporation

The Adobe Flash Player for Internet Explorer allows IE to render Flash objects. While this ActiveX controls is developed and published by Adobe, Microsoft authenticode signs the library. This is installed with Adobe Flash Player 20 NPAPI.

File name:

Flash.ocx

Publisher:

Adobe Systems, Inc. (signed by Microsoft Corporation)

Product:

Shockwave Flash

Description:

Adobe Flash Player 12.0 r0

Version:

12,0,0,69

MD5:

c8ae58f99437869bd372b104117bcb86

SHA-1:

d28cc2733e47b7468e5affc67e441cf956d66773

SHA-256:

0c83dbb36ca611956b78a7e750c579f6dfe6cf0a343ba080bb5ff888a5cd21ba

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)
Whitelisted (by digital signature)

Analysis date:

4/26/2024 2:04:17 PM UTC (today)

File size:

11.7 MB (12,270,072 bytes)

Product version:

12,0,0,69

Trademarks:

Adobe Flash Player

Original file name:

Flash.ocx

File type:

OLE control extension (Win32 OCX)

Language:

English (United States)

Common path:

C:\Windows\System32\macromed\flash\flash.ocx

Digital Signature

Signed by:

Microsoft Corporation

Authority:

Microsoft Corporation

Valid from:

5/20/2013 6:10:24 PM

Valid to:

8/20/2014 6:10:24 PM

Subject:

CN=Microsoft Windows Third Party Application Component, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:

CN=Microsoft Windows Third Party Component CA 2013, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:

33000000046326CFA831AC1674000000000004

Registration

CLSIDs:

{D27CDB6E-AE6D-11cf-96B8-444553540000}, {D27CDB70-AE6D-11cf-96B8-444553540000}

ProgIDs:

ShockwaveFlash.ShockwaveFlash.11, FlashFactory.FlashFactory.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

2/6/2014 1:09:57 AM

OS version:

6.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

12.0

Entry address:

0x8EBBC7

Entry point:

55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, D3, FE, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 07, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, 6A, 0C, 68, D0, 2D, AB, 10, E8, 2A, 80, 00, 00, 33, C0, 40, 8B, 75, 0C, 85, F6, 75, 0C, 39, 35, 8C, 8B, BE, 10, 0F, 84, E4, 00, 00, 00, 83, 65, FC, 00, 83, FE, 01, 74, 05, 83, FE, 02, 75, 35, 8B, 0D, 00, 70, A6, 10, 85, C9, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D1, 89, 45, E4, 85, C0, 0F, 84, B1, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 11, FE, FF, FF, 89, 45, E4... 
[+]

Entropy:

6.8844

Developed / compiled with:

Microsoft Visual C++

Code size:

9.1 MB (9,540,096 bytes)

Safe for Initializing Control

CLSID:

{D27CDB6E-AE6D-11cf-96B8-444553540000}

CLSID name:

Shockwave Flash Object

The file Flash.ocx has been discovered within the following program.

Adobe Flash Player 20 NPAPI by Adobe Systems Incorporated

www.adobe.com

7% remove it

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.