home

Flash.ocx

Shockwave Flash

Microsoft Corporation

The Adobe Flash Player for Internet Explorer allows IE to render Flash objects. While this ActiveX controls is developed and published by Adobe, Microsoft authenticode signs the library.
Publisher:
Adobe Systems, Inc.  (signed by Microsoft Corporation)

Product:
Shockwave Flash

Description:
Adobe Flash Player 11.9 r900

Version:
11,9,900,170

MD5:
9859157d458f7655e008fec7570ad6dd

SHA-1:
e497fe7e06b680ffa7b96a186bec6408c94e5584

SHA-256:
341ca6b857beed975589995a57f5a5ce04211031b08886fd8d9de7fb4e7c7186

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/19/2024 4:08:44 AM UTC  (today)

File size:
14.8 MB (15,503,832 bytes)

Product version:
11,9,900,170

Copyright:
Adobe® Flash® Player. Copyright © 1996 Adobe Systems Incorporated. All Rights Reserved. Adobe and Flash are either trademarks or registered trademarks

Trademarks:
Adobe Flash Player

Original file name:
Flash.ocx

File type:
OLE control extension (Win64 OCX)

Language:
English (United States)

Common path:
C:\Windows\System32\macromed\flash\flash.ocx

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
6/18/2013 12:26:18 AM

Valid to:
9/18/2014 12:26:18 AM

Subject:
CN=Microsoft Windows 3rd party Component, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Windows Third Party Component CA 2012, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000000B8B9486A892605C5700000000000B

Registration
CLSIDs:
{D27CDB6E-AE6D-11cf-96B8-444553540000}, {D27CDB70-AE6D-11cf-96B8-444553540000}

ProgIDs:
ShockwaveFlash.ShockwaveFlash.11, FlashFactory.FlashFactory.1

COM registered:
Yes

File PE Metadata
Compilation timestamp:
12/2/2013 9:26:22 PM

OS version:
6.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
393216:GIrx0qo6ABZsKvS6O362YtGx0hMcCXlwuV8SeS+T8Emk/i:AZ7KwujUmMi

Entry address:
0x9C4300

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, EF, 08, 01, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 03, 00, 00, 00, CC, CC, CC, 48, 8B, C4, 48, 89, 58, 20, 4C, 89, 40, 18, 89, 50, 10, 48, 89, 48, 08, 56, 57, 41, 56, 48, 83, EC, 50, 49, 8B, F0, 8B, DA, 4C, 8B, F1, BA, 01, 00, 00, 00, 89, 50, B8, 85, DB, 75, 0F, 39, 1D, 64, EC, 4C, 00, 75, 07, 33, C0, E9, D2, 00, 00, 00, 8D, 43, FF...
 
[+]

Entropy:
6.5671

Code size:
10.7 MB (11,199,488 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.